last executing test programs: 12.388306357s ago: executing program 1 (id=875): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/125, 0x7d}], 0x3, &(0x7f0000000500)=""/88, 0x58}, 0x4}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5200e6f8", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf252100000004002d8008000300", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) unshare(0x6a040000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0xbbc5e000) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r8, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') write$binfmt_format(r9, &(0x7f0000000040)='1\x00', 0x2) 9.632643842s ago: executing program 2 (id=879): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd650}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x101, 0x1ff, 0xff, 0x6, 0x2}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000100)=0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcm3724\x00', [0x30, 0xce9, 0x800, 0x1000, 0x9, 0x3, 0x4, 0x8, 0x4, 0x6, 0xc, 0x4, 0x5, 0x3, 0x9, 0x6, 0x2, 0xb36, 0xa, 0x1, 0x8000, 0x1, 0x4, 0xfffffffb, 0xfff, 0x9, 0x100, 0xb, 0x8, 0x4, 0x602, 0x3]}) r3 = syz_io_uring_setup(0x7eef, &(0x7f0000000200)={0x0, 0x6867, 0x200, 0x1, 0xc7, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x80000001, 0x401, 0x0, 0x400, 0xc, 0x100, 0x1}, 0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r2, 0x2, "4516"}, &(0x7f0000000440)=0xa) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000480)) sendmsg$nl_generic(r0, &(0x7f0000001800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x1288, 0x1f, 0x400, 0x70bd27, 0x25dfdbfe, {0x8}, [@generic="63c8b9d5130172e1926aa3dd0e1a73e5092e5c12fdbcb8235ff33cdd3df1889ffc2e561fd7b4a2cab748a364042fbd870adc874e8efe11f50fbe5af9fbd93c4e8abdfb0fbcd4d38829c8b03c15d17c2d96202a4f325a6b3cdf0e0c85e7d647d39780915b5bab8c8f11c1e7281da06f3a8a21f64a578c2671e462490b483b140ac5a28b27d5492d33e6f5ecc8c39d8e9e0af261300b9058c12c04d3d922a37767e8f6e9efbafedad23adb45d6420f26b997aa25b61ba3fc9042c3fba471d0b4450d76a093792b0dafc315e43f053e9ba893692a169bd36443b1ad94222d77539c015914f7a0868e885b25", @generic="299a55e058906388c2d3d44fa61545a9cc3ccdf6f4d01dea54eef5de5da16fa8a28ec29f", @generic="a6b5cd50bf51b65ccd1a9d7e5664329bb126a87390e9fe7006e3047fbe21fe808d7f98d71e38f2d709b8b9217ba7dd2bf134d6be1abbd960f3640dc6ab4308e089860a4e2927f5bae4ba4a2095d469dfaf28ddef9ac50a13a49b36135bef06ec8026c79c6506537d7a693c6944e3c9e0e116b93f59a676bda666cf83d059386e1b0f410626ee59eb3b0dbf712084728d3fdc0c64f5ec5c424306c50af6ad7f44b24ac80118356d1ed44f8cf417c3ff05a1c9a4b281d5360285354f13781984511adfb1db65d915ef141a5dbc1fbe6f0417e1b912a9e7f7821c117b78a38a0a1e7e2e0968e5ea2d9ba80323b65de13d69c767b204aa1bb49edfe13189d03b0a45d9cd4b09048b0415ca51b825b7b793c6c9d1ac8a21393bfbcc4087b81bf9a88d97dbfbdb6da5645a39659f7239f567c2548697e7b381986a5f1368c10688e4649fea755ce97b8aeb595f4e708f64191be2fc689db9cc0404d557a0544ef1e7679c674b3ce3d7a248042c3a3342b10edda023f07fe5096a58ad38f14745cb3258def30cc8fdb3a07197e3b45a41cc68f543ee986aced62a6fbdb73b55914bd4a4e7ab18eb72027144198bd95c8a8809dbf03edad9c2005d8bbe448a17150e0e5791c73a8815cbe07f3e9a4014b60341599a471298d052a1d88da3b967ae81ee7a946fa2e5177dc01a269478646f8c79c51c580043432ac170aacebdba618398590dc3f8f5c8a6bf256e94263f0070cf8470e77c0e1fe8cb095466f94b8ee2cd2f992d155e37b65c69721fdd88122ff149142664570059ea8884d4bb7fcbca59f085285ae78ec9c642369ce15fb6d6a6ceb88edf54ba8aea328de722ee84255abfd1b04d27ef6f28d21f72d6f6b9808d988e44dadc26e147a92c08abf85440319c5d39fb0eb8d7e17410665a6cef22f6238db5b12684d71393d6a4a9609e49adf27b4e3dc192c4900f2a08d7d12afb2a83ccc59bb3b17d1515df509f354b91748a01b7db40e0157ed8f4fbadcffbdfeef06d4b07932f8b8987e50e1e106dee725c69dc4d38862a3edde64c14daeb210e2e56a1d398d173bf0421eb9e6e11eed02c10e45a1979b14895bf37c3d47e60893922b2767acafea8455bbda89f5984c1e96322c2e2e834d8e024b122190afee6e5105340be462f38787aee9780121d4d70771d8e49422ef4938ca78a186109342057382c04024267a6236826b19ac11c7f9c0398e3e0bfa0b484450ddaa518eb23907e3a6e612a6bf412a62bf1f0620e25748a2047818a3c800fcb7be5eebc038622f421ae9051424187792760f5d387960d02119aa10ec26cf2251538c4b7658fefe4ecf68d96c96666ca5c26c21163c6eb18017e8a54c519421983e1e6596e15adf237c0494a6e2b11e542f39b2d37cde37a130547cffd216a9a695fddd6e4b64a01471c0eb19afc9421a2a625bfc5f6d96f8c469a43b8d890fb4728f61bc9c16aeabe1c19d73c07da4a4ed8e28db71a015d3a8c45ab7de6e09bd25fa39ade5c3175ba93358a0d6584de19d19af8787b54b238573b06495e0cf253070c8ce26ac97861d274039e9f624962eb9cf96341e4502df4aac268d63b4aa7262169458d671912b8ccabc9f41a7d919bbc73478551a6dd7124bd93de13f02e3d20e2ab234bd8e120a16c12c055ca4b46af48ac88af7cdbaf77579379dd69d8de379ba24025ed57cc258c41505414139a5d1f76373f3d0cdb66b669e8d83cc116a750aaf10bc5f5275fd2fdf222ed12d82218f5cc4ea900ef982bbf7e916b5231169150c48294a097dd5b62d3c614fa07a98ac85f0488c2d9e19fc0c5046cf2cca24f4392bb74223ec3b05997292f3092b96ba5cb79462b9e3298b03102881a4ab8d07e256609f16917cf3363f5feab3f4e16f647387eae41be7367f3b298b804f3a827cf1c284a0acbfb0b6b49aa6165f5ddb9f24f2391da83bd995ed6251de14c253286f45bcbf7f35308c393e4e900abe353a9af2afbfaeca48ceea53d979b9aa25958d8916423a05d350dcdab71415a6e522241da22234f96009f68dfe2ac4fe46904c0db81def1dffdb6e1041b73a0541b3e43bed1378bc541c69661eeb9b3494207b679ac6d05d1aa7c8e032eb278b6751e7b2b0d76b19b530cbd9dd30194259e18c06f589040da6c46f8b9cc48059e285ec7942f42a69fc754f9db4cbebe0e19b844f17e5070aa0527906193b5de05152eabbcf2ad9289ca9bb1ac1116ec288053bdb00774e9a0c3c117447bb577ef9d619f790e393815f09dfd5e5d891532cc41487f9bbcf3596ffb15543fddc4b89f003fa96ee54d83d49b6691d25780bf9e23dd0d3fabb2bfc473a925fe006e034034e32ee711a3713ae85e65438c9b893f841f6abe3185f90a10ccbe0f3294131eae0a10e9a029eabb42ff20b27dce3cd81b9aa3ac9627ed3562e8cacb7fa6b2264e55edd02ca15ab53901892b3ddde5e1835756769de354b95b4427fdab2dfbce93ad93ebd12a98afbe6cbd414e9423dac1f75d4cafe3c45ca8d608e4834941ae4e949c1ed0e8d4544ab0d19804e4a7de4d4b1e6054cfe8f01c690d76aadd354659f550cce406d992de6451773b0688f721f4a0e452808f7bec89c385332fe2f4cefcbe9f9fa0a81f552c6a769247c8b41ff64011eb949be9b6b2f7650613de92d1c90b597c5cb31e74680721e12c074b5a7561e73295a71bfdca96248cc3268b176908ac724362f0c6fbc36fb6d1ec28a63dd598ffe0d6d42fe70aa591a291d17803cdab7ca4ecedbda984c302dabbe23ad6551ab49b345604ec6085a85b872f283e2c7d3053c04c0c8806ab17a4d9391aa920e5c47faa1d491dea8ad620308f90ad5351624270435f99dbc3974e8653a62512b68c2e60a67d6addff9bbde6461b9b19819b46e363c488b9b53467b2456f2a167b10afe68b354ecb44385800e6220b1d56ec1a10af867d58c629f3203dfcd2a2bdd2b6b05521e29203f0f17ba6734c021795eed39b388a5cc51959cefab43e554fe07a0cef170ef9b27c306f277bb42583b88b5befe292ffb624152d97d6c2475bc92761dbaed5fbbdffe74236f617680f79bb5f42cca9dcad10b4437948c8707d96120723070b7778e7a56e4ec8204c0ed114d074d18d4593bbc36fd21af89f899ed614e80212e86187bb7abc22e3453a68386fd0bc96bfb80668faab0c357ed730ef1834f53286071a1ae40d1c4991318935b9927bae6177256060b5aefb6b84d65c4d800f1ea90d58aa6c355eb70eb2e077e9a2a59d1c5bcdd89602e1be48afa8897c464c8f53385be78d019a5cfa421c6b651f8cbf7909211e39833e7881ba3a41d46cf3ae7b03f424c2b4eb90be73e86b666fc2de23e19814cb3c9ed098b2fb5a4a7c72416edf0e5a071c8f515d2537b4ce57a0e8a7fd97240ebd729a147a52a17b7858ef08a9935a5c868c268f2c61a2ba3f3f004d36c388de632a97fbba8f08364ccb902e10ddf3a812760768101d3e315c5071820abfb05a8e44083238a26cfd8726c9f24ca79956409c25511be552f488500a33c98e8f06d43184cb77d00f536c9b53ba4b7b2cf4121514e2f01b92e0de30b8a23dd807438a4af2e190125f0ae87a8654f31ab731d8b97ba6e829c24a0a2993e1abe8148da60bb3d2c34e15cdee8e0623c5b75507be400d3c780368d588cf523b6add3420a7aabb42bfc2c688ae3d77494f2952adca3191cae4fdaa843405ce7212517b7868d9fd464aa14811e3d9a0ddbe9e7f5be7d8b75134f8debd0f042bf6a247c1a07646a6cd6ed41d3f04a56b2ddf55970a30c98ff00094625002f5b1b6329db39758592ee461e212f8db21d2043e283f2f51b02dae91a962a46fd628554869abee5d50cb56488b2a2e496b4924fe3a2ed7d542698beac3fe5cdf19267f1761d4312c03e4811a43472ea35e4cc833b1d1c5fdeb99934432305220167701cbffbfa53dda8691780322b6e8eaa73089e347550caa9700b3a4e3d4dc76bf190fb68a8a4cd0580545be3eaa4c1c12f4696762d0af8a51ee3afbbee58a844ebe292eb10114f4bee46c681b9ccbba55595685c1423cf03beccbf57b59045d9eee6fb08a075cc59d16a0414b2b9352afdccbbdbdb0d620e7b026c28beab680f6fcab9734813ca52067fabe7425099e5764528ad4c23ad341e8e9d9393dccc31f754efd8f1b48a94b4a2b4169ce44b071b4ab575f6882e917a2cccc4981bbb945b39c52f47ccd2249dfaaebf4df16b0450864a371c77dafaef08dfd5a81ce311247bb2249ec4a7057e4de8c3f76b5cf21cf1271be5bbd529310e3bdfd876ea3ab828cbb8f35f094e654224d687c1eb14588debea8d21b444297afb7357e075a6cb2f03a3dd69a14dccfa31fa26afba5680bc1a90cca26712274eb98b3c7fb5750db83f96e37023355c8bf4a4f2a80de3e993a5522c31629d6afffff49facc835c93315dc94c8d2fd2ccff2bff64d38ab1910926e162c0d76c8640638b565526345bc5df4a64bc89f2aaff3c8f7a79bda3bcb3009ff2c249e2996b6293fcf45cdac14187aa7b6df51600aab061e77a430d6f9ea1ab594dda733048d6c69dd41322830526cfc841802f624414dd2c5b5c9704511baddb5484747dd788a903e342a7e84f2643e70d237c1cc5ab3d5e273a5ef29c532d7ab5da61587841dd416c6686536cc60916b4ec37f4f3f5b6d8a940a7eaabcbeae1e51d4377fe85f2d85346078ef189ac0623e69a8b22d9e57eea517f6bed1e11121804a0c792a27b82832124806d96da39ce0af33db732c75625471f838d54bf6b239cc799fbef9c7041f8df0999fafa5f9e9dba4fb222b631e474b4e67679b3d5f724308571e2ffdbda93a4c04893b02d3319ddb2457e0dd872671b9ec228b0faee0d782da6bd211afec77bccea6402b3e6802e4e0186ff5fb74ab6304703c9e76ca9e2e1f5260a664519327c1f28a9071feaf11471930159ef83efed41c3d7a5e829315624cfff94ac5158429b869dea8075ec6e3c4badb2a23aa7f97223e97ebb4e0c66f5fee8092246afadf02c6f762400248c9ae10f21f1dd1a31abcc2e8cffcc8f03c13c777292eef3433c9f48b7042ffced63f2640888984e6c3162512ab5d1d727887c5ab4b0fd983b8e370b5b8270e87e54d2193151a5f037f22bf1988c611bd6fab4ba35fad1caab3f1d89af0009f1e9e7646bba228780bec842cc16a3e1346a06e7a1bd8c5127a421b34f4dead4f3d3a4134cfa81439e656a555ed79f568dc84bf845092fc3439e97305fb32e43d63777f6e8a2f83d61b6220d2818dcbd2f2e4e4b81cce214dde88d104f56163e75e10df58bdef0f6ab3ca2018b6adf8b713177fde9567f24deb4cd8b27932fdbd43092b4497951500d0b433a785f33620e57d1cf48a20f7cfce8811c9f5674d14fb71657e6624d2fb54e4f9b85bc5097316d62607fe434146120587a94700c2f2ed3189f69d3ce29f3455fea7a9d3c78add3760cf6484b30819e92754a5f4e31ee9cd2c6db82ee0fef358ebbb1c036e4c861bf31138697d7f95dfefb42a685c3560ecbb18d6475a1bb75772afe6fcc4481ef6fd93cbf01291572487548effd3e6c5643ec658b0e0bbc14c332c668528a9b86762095cf1ba5c40bfb448e2de2929344fb124f6b504e47d0f3579c824ff5ddd22614662a9ad847fab01c6dc7b6970ce250047d664197fb536141e5467a46c4e7c30cd1667195b7f4cf532fbf83bc3eb6b085d55cbe9bc2a1dc7d8616a1a7087aeeb4ce4840cd1df87045ee5fdf62b110ded02fffecc5ac44eb4a040cff56", @nested={0x50, 0xe2, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x42}, @generic="bf9883f229f3c27cf305ae5b98e39bbad0fdc89ebcdf61fe32d6c15a706243cf520564b1", @typed={0x5, 0x20, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x95}, @nested={0x4, 0x123}, @typed={0x8, 0x3a, 0x0, 0x0, @uid}]}, @nested={0x113, 0x8b, 0x0, 0x1, [@nested={0x4, 0xaa}, @nested={0x4, 0x4e}, @generic="069d8c40dec53692ce88b11b960f3c7d3310a8ea0112c9f1c109b7683b1c06b08fd01a6e1a69fa100752aa10fb214a2e2bce1510848aaff58e051f023a5ad23c30b45a78de8071d656c785a1843f06995ecb1c0f90005b609d1114caad3a543ba11a4b7538bf3b6a00ae2227bb4ed6026282301873239feabb399247d8", @generic="c34f586d6f1907ec91856632", @nested={0x4, 0x167}, @nested={0x4, 0xa9}, @nested={0x4, 0xe2}, @generic="f2c8d3c2c2b4871ac5d2611ebe9d9471a0e7dfb7b416f14946ae44e28e5c1f7b4c9da9f1d71c2df5d8ee29bc1ff8ee30af7138bbae208f2478dbd607fd8fc42da09bc9216c16e9be6d6adbb1799362dee50c343f861abeeaf89071b0ecedd3e10e304e9e7251cfb2c68dde85856d", @nested={0x4, 0x26}]}]}, 0x1288}, 0x1, 0x0, 0x0, 0x4040804}, 0x4000000) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001880), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4420060}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000001980)={0x1, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000019c0)={r1, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001a00)={r1, 0x7}, &(0x7f0000001a40)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001a80)={0x9, 0x4, 0x1ff, 0x8, r6}, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000001ac0)={0x2, 0x5, 0x7}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000001b00)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) r9 = openat$cgroup_ro(r0, &(0x7f0000001b40)='blkio.bfq.io_merged\x00', 0x0, 0x0) fcntl$setsig(r5, 0xa, 0xf) ioctl$BLKRRPART(r0, 0x125f, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000001b80)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xfb52, 0x6, 0x9, 0x5, 0x2}, &(0x7f0000001c40)=0x98) ioctl$KDGKBTYPE(r9, 0x4b33, &(0x7f0000001c80)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000001cc0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r9, 0x3ba0, &(0x7f0000001d40)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x80, 0x5418}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x8000000) 9.611962813s ago: executing program 2 (id=880): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_vhci(0x0, 0x9) 9.289627697s ago: executing program 2 (id=881): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x1947, 0x0, 0x44}) 9.124135274s ago: executing program 2 (id=882): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x5, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x20008850) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(r7, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r8, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x400000b, 0xa, {0x1, 0x0, 0x6, 0x20040d, 0x7, 0x0, 0xed1, 0x49, 0x5, 0xc000, 0x7ff, 0x0, 0x0, 0x4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x400009, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r10, r10, r10}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) 8.498059527s ago: executing program 0 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80x0}) connect$packet(r6, &(0x7f0000000440)={0x11, 0x7, r7, 0x1, 0x2}, 0x14) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f00000001c0)={0x8, 0x3, 0x6, 0x1000000002, 0x8000000, 0x80000000}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_getvlan={0x20, 0x72, 0xb01, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r10, 0x1, 0x71bd28, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r4, r3, 0x4, r3}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x1, @link_local}, 0x80) fcntl$notify(r0, 0x402, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 8.215788913s ago: executing program 0 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fb000000deffffff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000161eaf5"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x3, 0x10e00) ioctl$OTPGETREGIONINFO(r3, 0x400c4d0f, &(0x7f0000000280)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x541b, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x20, 0xfd, 0x0, 0xfdef8001}, {0x16, 0x0, 0x0, 0x1}]}, 0x8) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {0xffe0}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x244) (rerun: 32) write(r7, &(0x7f00000000c0)='1\x00', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r9, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) close(r9) (async) write(r8, &(0x7f00000001c0)='1\x00', 0x1) 7.9859219s ago: executing program 0 (id=885): r0 = syz_open_dev$mtd(&(0x7f0000002700), 0xfffffff0, 0x80) ioctl$OTPGETREGIONINFO(r0, 0x400c4d0f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioperm(0x7, 0x4, 0x7) 7.813179808s ago: executing program 0 (id=886): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000080)) 7.518421485s ago: executing program 1 (id=887): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x2, 0x80) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) 7.170039026s ago: executing program 1 (id=888): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32=0x0, @ANYBLOB="0c000e"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_FDB, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4040080) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6.543477939s ago: executing program 3 (id=891): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 6.306895798s ago: executing program 3 (id=892): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4a242, 0x1a1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x24, r5, 0xe7816804f9787cab, 0x70b52a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x910) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x1, [@fwd={0xe}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}]}}, &(0x7f0000000680)=""/117, 0x92, 0x75, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000a00)={&(0x7f0000000840)=""/131, 0x83, 0x0, &(0x7f0000000900)=""/207, 0xcf}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%-5lx \x00'}, 0x1c) r12 = openat$nmem0(0xffffff9c, &(0x7f0000000b80), 0x80, 0x0) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r13, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x1c, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @generic={0x1, 0x2, 0x2, 0xd21}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x2b, &(0x7f00000004c0)=""/43, 0x40f00, 0x41, '\x00', r7, @flow_dissector=0x11, r8, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xe, 0x8}, 0x10, r9, r10, 0x6, &(0x7f0000000bc0)=[r11, r12, r13], &(0x7f0000000c00)=[{0x2, 0x1, 0x5, 0x9}, {0x1, 0x3, 0x5, 0x4}, {0x2, 0x4, 0xe, 0xd}, {0x0, 0x4, 0xb, 0x5}, {0x3, 0x4, 0x8, 0xa}, {0x4, 0x1, 0xd, 0x8}], 0x10, 0x5}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 5.049062538s ago: executing program 3 (id=893): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080), 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xffffffffffffffff) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) write(r2, &(0x7f0000000180)="712d49e41a33bac5195bfa5a8d0e0337d6199f5c84eea74858bc7e1b662e6141afa2f696ce35fa9f8723a45a0969d190061d1109a46067673edce9f706b4b13b7fc553f1a13cd87dce47efa910619112b15a2e", 0x53) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) 4.232746316s ago: executing program 2 (id=894): r0 = socket(0x1e, 0x805, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x1e, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000000c0)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000780)={r8, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x4, 0x1, 0x4, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[r5, r8, r9, 0x0, r10, r11], 0x6}) (async) fcntl$addseals(r1, 0x409, 0x9) 3.908736864s ago: executing program 1 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x7, 0x3, 0x400, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0xb8, [@remote]}, @lsrr={0x83, 0x1f, 0x8c, [@remote, @loopback, @empty, @empty, @private=0xa010100, @remote, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x5, [{@rand_addr=0x64010102, 0x8}, {@multicast1, 0x3}]}, @cipso={0x86, 0x9, 0x1, [{0x1, 0x3, "a5"}]}, @timestamp_prespec={0x44, 0xc, 0xbb, 0x3, 0x9, [{@local, 0x4}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xae000000}}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000000580)=""/101, 0x5c, 0x65, 0x1, 0x5}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xff, '\x00', r1, r2, 0x2, 0x4, 0x2}, 0x50) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x4, 0x7, 0x14014, r3, 0x9, '\x00', r1, r2, 0x2, 0x1, 0x1, 0xf, @void, @value, @value=r10}, 0x50) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r12 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r12, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r12], 0x108}}], 0x2, 0xc040) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r11, 0x0, 0xc) r14 = openat$cgroup_subtree(r13, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000080)=ANY=[@ANYRESOCT=r14], 0xe) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000506010100000000000000000200000a0900020073797a32000000000900020073797a3000000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008800) r15 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f00000002c0)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', r15) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000280)="e6945f282f7dc252e5af209790039d4bad8e83ac391d99859a9ade3cb5413d1b86c5129ecfa13b7cf44859eed1ddd133b615aeca5b90686b435dd41875c74efd4958b42e56e6e4ed31fce317b9e80270100677de2d394d79b562ce5ef7582f6e45179b2860acf3d70284b29bcde01044cda2fe3831c023f892c14bbd5654ff72f37c0fa3be059e2e869ce914fd3979db2b94abf83f5e9096b448c90f4cd801bdff23755a4f36e28de3256e2ac11aa57bd178d9871499fa00e35bcb", 0xbb, r15) 3.686068625s ago: executing program 0 (id=896): inotify_add_watch(0xffffffffffffffff, 0x0, 0x5db) (async, rerun: 32) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x400) (async) setresuid(0x0, 0xee00, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) (async) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r3 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x101, 0x53}, 0x18) (async, rerun: 32) r4 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x21e204, 0x80}, 0x18) renameat2(r3, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x6) (async) mkdir(0x0, 0x109) (async) mount$overlay(0x0, 0x0, 0x0, 0x1002038, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x4, 0x8001}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0xa000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000003800)={{0x1, 0x0, r6, r7, r8, 0x8, 0x2}, 0x1, 0x23, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x7}) (async, rerun: 64) openat$nvram(0xffffff9c, &(0x7f0000000080), 0x309140, 0x0) (async, rerun: 64) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r10, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3.403097558s ago: executing program 0 (id=897): unshare(0x60000000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x426a03, 0x0) mkdirat(r0, &(0x7f0000000140)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1ef) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x20000, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0xd8, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x448123a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f3f9c7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d59537e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5c64a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f934893}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e0ee15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4214f9cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ecfeefb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69571860}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf1f0ab8}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3.173411011s ago: executing program 3 (id=898): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x9) 3.093185916s ago: executing program 3 (id=899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.003591961s ago: executing program 2 (id=900): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={r1, r2+10000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffee2) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000480)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x341042) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, &(0x7f00000001c0)) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x44}) 2.894415019s ago: executing program 1 (id=901): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x7ad190211376aaf) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@local, 0xf, 0x0, 0x3, 0x0, 0x1, 0xf3fb}, &(0x7f0000000040)=0x20) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.893813804s ago: executing program 1 (id=902): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x41c, 0xffffffff, 0x0, 0x0, 0x1d4, 0xfeffffff, 0xffffffff, 0x354, 0x354, 0x354, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2a8, 0xaa6c, 0x2}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@icmp6={{0x24}, {0x5, "a8dd"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xddb, 0x1}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev, @private1, [], [], [0x0, 0x0, 0xff]}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001d80)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="3aa53d9ac4ffb303eb21b51e6155bc66bbd495e4c193413de69fe0c9ba2a280bc21709ba90b39d2e69cfd889a490b136d4a2871dcf77c809b7a3ab07", 0x3c}, {&(0x7f0000000340)="8ddf5e95d2cac3f94dd700d2fddbf2c4cf7c9a5d3ebacbe226ea3d43abe4535da2cefa6f4981c9e9002630a5b6522a92ea", 0x31}], 0x3, 0x0, 0x0, 0x4000800}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)="7c8a16bc0566f6f572f8ef828215845b2780555d27dc17d7ba0208e1157c6eb37ce3e9b4121e9dbd8fb3deb6c86d12558302ee6a9722ad361be5baca7c55de1963a52a9962c8a45ac1cadf561db0ce3757846fda2aca34451e3a1a391c52febb67dbfeee14a124ce305ff6b85a74167544860a7ed264483d7fc8bddbdf21837d5cfbb1b60aac3a5d4142781c6e", 0x8d}, {&(0x7f0000000600)="d52a4e69453be6c927206afd871ec5d30bbcf562e62cccfcaa27d1a37d3e6586d1aa310c8ce06d2cc770aefea383855618e085ac6eee6278f1119f4e4c18449e43f50d57f1aabff1e615a435b8cce89e931ca038abf8281b2db20e675a2053e871e8bfaac3ca0f81c5a8dddf2b4967b95c8e8c60fd145b6a27ab5d196c47fda5b789ecda9c1f5cf045a7ee4fe11f399e462709cecaa9ed3aba3e65e353064a9fd0ab9ee755c419dc9724b37fd7b178fc3f3cdc204cbf800919938ee5477ce32fe9", 0xc1}, {&(0x7f0000000700)="42c45e9d76dd8bb5301a26f1506fb454bd00b2", 0x13}], 0x3, &(0x7f0000000940)=[@cred={{0x18}}], 0x18, 0x4040}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000800)="4adbab0ebbaaa57bb4eaff71c852572837365d24d5226418c9061bbc42ecc34de200b71fdd9b47bff0b57d7156305cb417ae7da90141d22ac414e6fdb21b935def68e40ccc029c55cf908eabcd918665ad246069a5c6ad7ad90c6fcf7b40d8ac5f2b49", 0x63}, {&(0x7f0000000bc0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4c000}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c00)="54936967530a58ba93260bc227ef768538e2614d770865e6b09439de09408d7cd691d3163150ee7bc2dad8fa1a84dcfb2d5687ad78b651696983c6ffcfead48aaf36db92d36e9b13df678d7d784a690550c02ad896062484336c0321e7e44811a15303f3cc1fbb9b059990602cc4126e8f0adcdf639d464e4aeb6b8039371d9dfa73a8b6bf6024a0ec136a781605244e59097be9385e0a7a97c7a00039d0b25d3372c5149a546155400b1f6ae08c283a26351fa10532a848378552b425f11eb59e9151f5c4f1772ad9998dfe79f1217d48e9abab3c048fc09df41c330128", 0xde}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000010000000131101eedf7f85f6e000000", @ANYRES32], 0x28}}], 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0009bb49", @ANYRES16=r7, @ANYBLOB="0d882bbd7000fddbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x230a}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) 0s ago: executing program 3 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) kernel console output (not intermixed with test programs): ew full-speed USB device number 5 using dummy_hcd [ 82.357762][ T34] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 82.373106][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.376213][ T34] usb 6-1: can't read configurations, error -61 [ 82.809525][ T6088] netlink: 'syz.3.41': attribute type 4 has an invalid length. [ 82.866617][ T34] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 82.892539][ T34] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 82.905142][ T34] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.909011][ T34] usb 6-1: can't read configurations, error -61 [ 82.918308][ T34] usb usb6-port1: unable to enumerate USB device [ 83.562358][ T6098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 83.565853][ T6098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.593980][ T6098] vhci_hcd vhci_hcd.0: Device attached [ 83.693615][ T6101] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 83.693644][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 83.696461][ T6101] vhci_hcd vhci_hcd.0: Device attached [ 83.877147][ T9] usb 44-1: SetAddress Request (2) to port 0 [ 83.877202][ T9] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.971566][ T845] usb 42-1: SetAddress Request (2) to port 0 [ 83.971618][ T845] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.983593][ T6099] vhci_hcd: connection reset by peer [ 83.985056][ T13] vhci_hcd vhci_hcd.3: stop threads [ 83.985084][ T13] vhci_hcd vhci_hcd.3: release socket [ 83.985342][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 84.298376][ T6109] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 84.301272][ T6109] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.305044][ T6109] vhci_hcd vhci_hcd.0: Device attached [ 84.394262][ T6109] netlink: 'syz.1.44': attribute type 12 has an invalid length. [ 84.701071][ T34] usb 40-1: SetAddress Request (6) to port 0 [ 84.705317][ T6103] vhci_hcd: connection reset by peer [ 84.723396][ T13] vhci_hcd vhci_hcd.2: stop threads [ 84.727907][ T13] vhci_hcd vhci_hcd.2: release socket [ 84.732589][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 84.769885][ T34] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 85.369197][ T6117] veth1_macvtap: left promiscuous mode [ 85.379813][ T6111] vhci_hcd: connection reset by peer [ 85.382553][ T6120] netlink: zone id is out of range [ 85.384775][ T6120] netlink: zone id is out of range [ 85.386321][ T6117] macsec0: entered promiscuous mode [ 85.386713][ T6120] netlink: zone id is out of range [ 85.386762][ T6120] netlink: zone id is out of range [ 85.386803][ T6120] netlink: zone id is out of range [ 85.405678][ T13] vhci_hcd vhci_hcd.1: stop threads [ 85.408811][ T13] vhci_hcd vhci_hcd.1: release socket [ 85.413251][ T6120] netlink: zone id is out of range [ 85.421093][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 85.947712][ T6122] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 86.019610][ T6124] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 86.247416][ T6124] syz_tun: entered promiscuous mode [ 86.297829][ T6124] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 86.683418][ T6132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.719570][ T1356] cfg80211: failed to load regulatory.db [ 86.880648][ T6132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.004114][ T6132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.020965][ T6149] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 87.092132][ T6132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.199976][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.219494][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.231056][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.243939][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.705074][ T6156] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 87.707866][ T6156] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.726789][ T6156] vhci_hcd vhci_hcd.0: Device attached [ 87.804554][ T6156] netlink: 'syz.3.57': attribute type 12 has an invalid length. [ 89.025886][ T845] usb 42-1: device descriptor read/8, error -110 [ 89.401248][ T6158] vhci_hcd: connection reset by peer [ 89.410348][ T12] vhci_hcd vhci_hcd.3: stop threads [ 89.417294][ T12] vhci_hcd vhci_hcd.3: release socket [ 89.424052][ T9] usb 44-1: device descriptor read/8, error -110 [ 89.425904][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 89.486386][ T845] usb usb42-port1: attempt power cycle [ 89.821343][ T34] usb 40-1: device descriptor read/8, error -110 [ 90.212130][ T34] usb usb40-port1: attempt power cycle [ 90.314827][ T9] usb usb44-port1: attempt power cycle [ 90.626882][ T845] usb usb42-port1: unable to enumerate USB device [ 90.771995][ T34] usb usb40-port1: unable to enumerate USB device [ 90.924242][ T9] usb usb44-port1: unable to enumerate USB device [ 91.421475][ T4753] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.556306][ T6201] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 91.581287][ T4753] usb 5-1: Using ep0 maxpacket: 16 [ 91.588185][ T4753] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.595534][ T4753] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.602519][ T4753] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.606539][ T4753] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.611549][ T4753] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.620592][ T4753] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 91.624585][ T4753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.627903][ T4753] usb 5-1: Product: syz [ 91.630371][ T4753] usb 5-1: Manufacturer: syz [ 91.633115][ T4753] usb 5-1: SerialNumber: syz [ 91.640637][ T4753] usb 5-1: config 0 descriptor?? [ 91.645087][ T6197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.856185][ T6197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.140596][ T4753] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 92.177898][ T6211] tmpfs: Unknown parameter 'usrquotaz¸E:_inode_hardlimit' [ 92.224550][ T845] usb 5-1: USB disconnect, device number 2 [ 92.857219][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 92.970892][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 93.638536][ T6249] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 93.970149][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.114593][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.379749][ T6292] 8021q: VLANs not supported on ip6tnl0 [ 96.498513][ T3989] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 96.549467][ T6323] bond1 (unregistering): Released all slaves [ 96.661275][ T3989] usb 8-1: Using ep0 maxpacket: 16 [ 96.668268][ T3989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.681248][ T3989] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.687565][ T3989] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.690859][ T3989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.705613][ T3989] usb 8-1: config 0 descriptor?? [ 96.852895][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 96.867948][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 97.068870][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.101'. [ 97.075982][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.080961][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.301345][ T6335] syz_tun: left promiscuous mode [ 98.683344][ T6335] veth1_macvtap: entered promiscuous mode [ 98.686845][ T6335] macsec0: left promiscuous mode [ 98.715899][ T6335] 8021q: adding VLAN 0 to HW filter on device eth0 [ 98.725697][ T6335] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.735141][ T6335] 8021q: adding VLAN 0 to HW filter on device eth2 [ 98.747314][ T6335] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.841622][ T3989] usbhid 8-1:0.0: can't add hid device: -71 [ 98.844375][ T3989] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 98.853536][ T3989] usb 8-1: USB disconnect, device number 3 [ 98.935749][ T6360] lo: entered allmulticast mode [ 98.943474][ T6360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.972670][ T6362] Trying to write to read-only block-device nullb0 [ 99.138444][ T6370] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET) [ 99.161428][ T6373] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.165604][ T6373] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 99.424367][ T6384] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.437883][ T6383] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 99.442374][ T6383] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 99.782677][ T6394] bridge_slave_0: left allmulticast mode [ 99.785581][ T6394] bridge_slave_0: left promiscuous mode [ 99.790777][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.816836][ T6394] bridge_slave_1: left allmulticast mode [ 99.819348][ T6394] bridge_slave_1: left promiscuous mode [ 99.822921][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.856072][ T6394] bond0: (slave bond_slave_0): Releasing backup interface [ 99.882699][ T6394] bond0: (slave bond_slave_1): Releasing backup interface [ 99.901234][ T6394] team0: Port device team_slave_0 removed [ 99.932554][ T6394] team0: Port device team_slave_1 removed [ 99.934682][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.944723][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.945715][ T6402] capability: warning: `syz.3.120' uses 32-bit capabilities (legacy support in use) [ 99.955519][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.958870][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.967034][ T6394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.009096][ T6400] team0: Device xfrm0 is of different type [ 100.128424][ T6394] tipc: Started in network mode [ 100.132527][ T6394] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 100.136119][ T6394] tipc: Enabled bearer , priority 0 [ 100.382123][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 100.387188][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.389965][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.335341][ T6474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 101.340987][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.345740][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 101.441309][ T34] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 101.470227][ T6474] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 101.611825][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.622790][ T845] usb 38-1: SetAddress Request (6) to port 0 [ 101.624710][ T41] tipc: Node number set to 11578026 [ 101.629272][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.648018][ T845] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 101.658402][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.699313][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.716920][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.740658][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.753808][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.769140][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.787102][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.805461][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.839123][ T34] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 101.842594][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.847292][ T34] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.855476][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.860758][ T34] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.895043][ T34] usb 8-1: string descriptor 0 read error: -22 [ 101.899589][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.906292][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.981043][ T34] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.996115][ T6475] vhci_hcd: connection reset by peer [ 102.000348][ T13] vhci_hcd vhci_hcd.0: stop threads [ 102.003314][ T13] vhci_hcd vhci_hcd.0: release socket [ 102.008132][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 102.373656][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 102.521312][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 102.692300][ T56] usb 7-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 102.696522][ T56] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 102.700849][ T56] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 102.713917][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 102.723444][ T56] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 102.730157][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.782044][ T56] usb 7-1: config 0 descriptor?? [ 103.029841][ T6485] netlink: 156 bytes leftover after parsing attributes in process `syz.2.133'. [ 103.079640][ T56] usbhid 7-1:0.0: can't add hid device: -71 [ 103.083943][ T56] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 103.132616][ T56] usb 7-1: USB disconnect, device number 2 [ 103.607169][ T6500] ======================================================= [ 103.607169][ T6500] WARNING: The mand mount option has been deprecated and [ 103.607169][ T6500] and is ignored by this kernel. Remove the mand [ 103.607169][ T6500] option from the mount to silence this warning. [ 103.607169][ T6500] ======================================================= [ 103.653429][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 103.664017][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 103.670668][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 103.697063][ T6500] random: crng reseeded on system resumption [ 103.773553][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 103.777553][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 103.781381][ T6504] netlink: 'syz.2.141': attribute type 18 has an invalid length. [ 103.784809][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 103.801874][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.804973][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 103.809367][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 103.809525][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.813925][ T6504] netlink: 'syz.2.141': attribute type 18 has an invalid length. [ 103.818550][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.828125][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.898011][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.236863][ T6518] tmpfs: Unknown parameter 'noswað' [ 104.335649][ T9] usb 8-1: USB disconnect, device number 4 [ 104.639494][ T6529] Cannot find set identified by id 0 to match [ 104.937202][ T6522] bond2 (unregistering): Released all slaves [ 105.516201][ T56] libceph: connect (1)[c::]:6789 error -101 [ 105.521381][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 105.604962][ T6541] ceph: No mds server is up or the cluster is laggy [ 105.617065][ T6546] i2c i2c-0: new_device: Missing parameters [ 105.645545][ T6550] loop5: detected capacity change from 0 to 7 [ 105.723658][ T1305] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.729271][ T1305] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.735446][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.745919][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.751035][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.759366][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.764914][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.773440][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.777472][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.781106][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.793576][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.797891][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.804269][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.810906][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.818412][ T6550] ldm_validate_partition_table(): Disk read failed. [ 105.827962][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.834788][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.841528][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.851687][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.857065][ T6550] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 105.861701][ T6550] Buffer I/O error on dev loop5, logical block 0, async page read [ 105.866365][ T6550] Dev loop5: unable to read RDB block 0 [ 105.869391][ T6550] loop5: unable to read partition table [ 105.873028][ T6550] loop5: partition table beyond EOD, truncated [ 105.878450][ T6550] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 106.015649][ T6565] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 106.202695][ T6577] __nla_validate_parse: 3 callbacks suppressed [ 106.202712][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 106.217244][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 106.701267][ T845] usb 38-1: device descriptor read/8, error -110 [ 107.070061][ T6587] capability: warning: `syz.2.162' uses deprecated v2 capabilities in a way that may be insecure [ 107.080630][ T6587] fuse: Bad value for 'user_id' [ 107.086311][ T6587] fuse: Bad value for 'user_id' [ 107.094014][ T845] usb usb38-port1: attempt power cycle [ 107.608688][ T6597] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 107.611614][ T6597] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.622106][ T6597] vhci_hcd vhci_hcd.0: Device attached [ 107.697646][ T6597] geneve2: entered allmulticast mode [ 107.707296][ T6601] fuse: Bad value for 'max_read' [ 107.746823][ T6603] fuse: Bad value for 'fd' [ 107.752201][ T845] usb 38-1: SetAddress Request (9) to port 0 [ 107.752252][ T845] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 107.764400][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 107.918593][ T6598] vhci_hcd: connection reset by peer [ 107.927070][ T12] vhci_hcd vhci_hcd.0: stop threads [ 107.950131][ T12] vhci_hcd vhci_hcd.0: release socket [ 107.957860][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 108.335498][ T6621] ptrace attach of "/syz-executor exec"[5749] was attempted by ""[6621] [ 108.917285][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.989951][ T6647] openvswitch: netlink: Flow key attribute not present in set flow. [ 109.083066][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.089666][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.096391][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.107027][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.112800][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.120312][ T34] usb 7-1: config 0 descriptor?? [ 109.337675][ T6651] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 109.340262][ T6651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.343509][ T6651] vhci_hcd vhci_hcd.0: Device attached [ 109.445743][ T6651] macvlan2: entered promiscuous mode [ 109.448056][ T6651] bridge0: entered promiscuous mode [ 109.568688][ T34] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 109.608078][ T34] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.621873][ T29] usb 40-1: SetAddress Request (10) to port 0 [ 109.630491][ T29] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 109.849908][ T34] usb 7-1: USB disconnect, device number 3 [ 109.903242][ T6652] vhci_hcd: connection reset by peer [ 109.906735][ T12] vhci_hcd vhci_hcd.1: stop threads [ 109.909639][ T12] vhci_hcd vhci_hcd.1: release socket [ 109.912743][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 110.549822][ T6656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.554232][ T6656] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.585123][ T6656] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.594434][ T6656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.600789][ T6656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.618974][ T6656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.632592][ T6656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.635325][ T6656] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.642530][ T6656] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.657646][ T6656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.661376][ T6656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.678856][ T6656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.753996][ T5101] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 111.009979][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 111.078396][ T6703] netlink: 'syz.3.192': attribute type 2 has an invalid length. [ 111.081817][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 111.157399][ T6703] : entered promiscuous mode [ 111.234948][ T34] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 111.240455][ T34] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 111.255323][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.262536][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.735981][ T6707] Bluetooth: MGMT ver 1.23 [ 112.171369][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.266950][ T6719] bond1 (unregistering): Released all slaves [ 112.354676][ T5849] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.358649][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 112.358676][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.358693][ T5849] usb 5-1: Product: syz [ 112.358705][ T5849] usb 5-1: Manufacturer: syz [ 112.358717][ T5849] usb 5-1: SerialNumber: syz [ 112.579246][ T5849] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.635378][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.701336][ T5101] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.701512][ T5762] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.791696][ T845] usb 38-1: device descriptor read/8, error -110 [ 112.846842][ T5849] usb 5-1: USB disconnect, device number 3 [ 112.876982][ T5849] usblp0: removed [ 112.917702][ T845] usb usb38-port1: unable to enumerate USB device [ 112.933215][ T6726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.197'. [ 112.950908][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.609975][ T6760] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 113.832809][ T56] usb 6-1: USB disconnect, device number 7 [ 114.701322][ T5762] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.734821][ T29] usb 40-1: device descriptor read/8, error -110 [ 114.817156][ T5762] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.821891][ T5762] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.181590][ T29] usb usb40-port1: attempt power cycle [ 115.464858][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.210'. [ 115.909483][ T6790] bond0: (slave syz_tun): Releasing backup interface [ 115.924012][ T6790] bridge_slave_0: left allmulticast mode [ 115.927884][ T6790] bridge_slave_0: left promiscuous mode [ 115.931013][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.957492][ T6790] bridge_slave_1: left allmulticast mode [ 115.960285][ T6790] bridge_slave_1: left promiscuous mode [ 115.962939][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.045604][ T6790] bond0: (slave bond_slave_0): Releasing backup interface [ 116.118629][ T6790] bond0: (slave bond_slave_1): Releasing backup interface [ 116.175847][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.186735][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.226361][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.242290][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.281869][ T6790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.462231][ T29] usb usb40-port1: unable to enumerate USB device [ 116.511598][ T5849] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 116.673674][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.700746][ T5849] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 116.748871][ T5849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 116.757669][ T5849] usb 5-1: string descriptor 0 read error: -22 [ 116.760470][ T5849] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.40 [ 116.766567][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.781350][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.872463][ T5101] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.877566][ T5762] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.921278][ T6806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.979970][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 117.141675][ T6806] 9pnet_fd: Insufficient options for proto=fd [ 117.450521][ T5849] usbhid 5-1:1.0: can't add hid device: -71 [ 117.473448][ T5849] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 117.479761][ T5849] usb 5-1: USB disconnect, device number 4 [ 117.864777][ T6842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.231'. [ 118.249880][ T5849] kernel write not supported for file /uhid (pid: 5849 comm: kworker/0:4) [ 118.318351][ T6852] loop5: detected capacity change from 0 to 7 [ 118.328189][ T6852] Dev loop5: unable to read RDB block 7 [ 118.330780][ T6852] loop5: unable to read partition table [ 118.336219][ T6852] loop5: partition table beyond EOD, truncated [ 118.339164][ T6852] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.404744][ T6859] syzkaller0: entered promiscuous mode [ 118.408222][ T6859] syzkaller0: entered allmulticast mode [ 118.424690][ T6859] tipc: Enabled bearer , priority 0 [ 118.651603][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.779313][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.791624][ T6852] Dev loop5: unable to read RDB block 7 [ 118.794081][ T6852] loop5: unable to read partition table [ 118.794436][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.797669][ T6852] loop5: partition table beyond EOD, truncated [ 118.803675][ T6852] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.040685][ T6850] tipc: Resetting bearer [ 119.072417][ T6850] tipc: Disabling bearer [ 119.085118][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.088878][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.094500][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.098157][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.104645][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.108631][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.117437][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.122156][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.359378][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 119.363689][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 119.415628][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 119.677385][ T42] audit: type=1326 audit(1785009091.839:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 119.688245][ T42] audit: type=1326 audit(1785009091.839:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 119.698617][ T42] audit: type=1326 audit(1785009091.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 119.713987][ T42] audit: type=1326 audit(1785009091.839:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705efec code=0x7ffc0000 [ 120.022191][ T42] audit: type=1326 audit(1785009092.179:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 120.032082][ T42] audit: type=1326 audit(1785009092.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 120.463569][ T6902] dummy_hcd dummy_hcd.0: remove, state 4 [ 120.470279][ T6902] usb usb5: USB disconnect, device number 1 [ 120.623844][ T6902] dummy_hcd dummy_hcd.0: stopped [ 120.626282][ T6902] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 120.891088][ T6904] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 120.896389][ T6904] dummy_hcd dummy_hcd.0: Dummy host controller [ 120.954992][ T6904] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 120.962984][ T6904] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 120.968103][ T6904] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 120.973897][ T6904] usb usb5: Product: Dummy host controller [ 120.975908][ T6904] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 120.978810][ T6904] usb usb5: SerialNumber: dummy_hcd.0 [ 121.004165][ T6904] hub 5-0:1.0: USB hub found [ 121.009622][ T6904] hub 5-0:1.0: 1 port detected [ 121.244675][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 121.790917][ T6947] openvswitch: netlink: ct_state flags 0001010a unsupported [ 122.467905][ T6973] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.266'. [ 122.478033][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 122.522192][ T6978] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 122.593998][ T6981] CUSE: info not properly terminated [ 122.599673][ T6974] xt_cgroup: path and classid specified [ 123.456527][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.477968][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.526277][ T7011] netlink: 'syz.2.275': attribute type 11 has an invalid length. [ 123.801509][ T5101] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 123.941589][ T42] audit: type=1326 audit(1785009096.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.278" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x0 [ 124.016707][ T7039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.283'. [ 124.021491][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.024888][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.046608][ T7039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.283'. [ 124.392055][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.400638][ T7048] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 125.040467][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.436519][ T7086] netlink: 112 bytes leftover after parsing attributes in process `syz.1.295'. [ 125.518219][ T7088] FAULT_INJECTION: forcing a failure. [ 125.518219][ T7088] name failslab, interval 1, probability 0, space 0, times 1 [ 125.531869][ T7088] CPU: 2 UID: 0 PID: 7088 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 125.531913][ T7088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.531923][ T7088] Call Trace: [ 125.531928][ T7088] [ 125.531935][ T7088] dump_stack_lvl+0x100/0x190 [ 125.531959][ T7088] should_fail_ex.cold+0x5/0xa [ 125.531979][ T7088] should_failslab+0xc2/0x120 [ 125.532003][ T7088] __kvmalloc_node_noprof+0x116/0x970 [ 125.532026][ T7088] ? __fget_files+0x21f/0x3d0 [ 125.532043][ T7088] ? keyctl_update_key+0xdf/0x160 [ 125.532065][ T7088] keyctl_update_key+0xdf/0x160 [ 125.532083][ T7088] __ia32_compat_sys_keyctl+0x379/0x550 [ 125.532109][ T7088] __do_fast_syscall_32+0xe7/0x970 [ 125.532130][ T7088] ? lockdep_hardirqs_on+0x78/0x100 [ 125.532153][ T7088] do_fast_syscall_32+0x32/0x70 [ 125.532175][ T7088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.532197][ T7088] RIP: 0023:0xf705efec [ 125.532219][ T7088] Code: Unable to access opcode bytes at 0xf705efc2. [ 125.532226][ T7088] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 125.532245][ T7088] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000053d12b6 [ 125.532256][ T7088] RDX: 0000000080000400 RSI: 0000000000000001 RDI: 0000000000000000 [ 125.532266][ T7088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.532275][ T7088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.532285][ T7088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.532308][ T7088] [ 125.749025][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.300'. [ 125.999298][ T7117] tmpfs: Bad value for 'mpol' [ 126.007349][ T42] audit: type=1326 audit(1785009098.169:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.305" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 126.119342][ T7124] FAULT_INJECTION: forcing a failure. [ 126.119342][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.125426][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.3.307 Not tainted syzkaller #0 PREEMPT(full) [ 126.125449][ T7124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.125458][ T7124] Call Trace: [ 126.125464][ T7124] [ 126.125470][ T7124] dump_stack_lvl+0x100/0x190 [ 126.125492][ T7124] should_fail_ex.cold+0x5/0xa [ 126.125515][ T7124] _copy_from_user+0x2e/0xd0 [ 126.125539][ T7124] keyctl_update_key+0x101/0x160 [ 126.125557][ T7124] __ia32_compat_sys_keyctl+0x379/0x550 [ 126.125583][ T7124] __do_fast_syscall_32+0xe7/0x970 [ 126.125604][ T7124] ? lockdep_hardirqs_on+0x78/0x100 [ 126.125625][ T7124] do_fast_syscall_32+0x32/0x70 [ 126.125645][ T7124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.125689][ T7124] RIP: 0023:0xf705efec [ 126.125709][ T7124] Code: Unable to access opcode bytes at 0xf705efc2. [ 126.125716][ T7124] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 126.125733][ T7124] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000005552d7a [ 126.125743][ T7124] RDX: 0000000080000400 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.125752][ T7124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.125761][ T7124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.125774][ T7124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.125796][ T7124] [ 126.262982][ T41] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 126.424266][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.432954][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.441957][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.459576][ T41] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 126.465530][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.472746][ T41] usb 7-1: Product: syz [ 126.476239][ T41] usb 7-1: Manufacturer: syz [ 126.480598][ T41] usb 7-1: SerialNumber: syz [ 126.492496][ T41] hub 7-1:1.0: bad descriptor, ignoring hub [ 126.496611][ T41] hub 7-1:1.0: probe with driver hub failed with error -5 [ 126.695734][ T41] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.363575][ T41] usb 7-1: USB disconnect, device number 4 [ 127.370832][ T41] usblp0: removed [ 127.371236][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.531221][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 127.537665][ T29] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 127.541328][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.544452][ T29] usb 5-1: Product: syz [ 127.546397][ T29] usb 5-1: Manufacturer: syz [ 127.548482][ T29] usb 5-1: SerialNumber: syz [ 127.641232][ T7156] FAULT_INJECTION: forcing a failure. [ 127.641232][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 127.646757][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(full) [ 127.646782][ T7156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.646794][ T7156] Call Trace: [ 127.646802][ T7156] [ 127.646811][ T7156] dump_stack_lvl+0x100/0x190 [ 127.646837][ T7156] should_fail_ex.cold+0x5/0xa [ 127.646865][ T7156] should_failslab+0xc2/0x120 [ 127.646891][ T7156] __kmalloc_noprof+0xfc/0x820 [ 127.646916][ T7156] ? user_preparse+0x9b/0x1c0 [ 127.646946][ T7156] user_preparse+0x9b/0x1c0 [ 127.646968][ T7156] ? __pfx_user_preparse+0x10/0x10 [ 127.647010][ T7156] key_update+0x211/0x5a0 [ 127.647034][ T7156] ? __pfx_key_update+0x10/0x10 [ 127.647074][ T7156] keyctl_update_key+0x8f/0x160 [ 127.647126][ T7156] __ia32_compat_sys_keyctl+0x379/0x550 [ 127.647153][ T7156] __do_fast_syscall_32+0xe7/0x970 [ 127.647176][ T7156] ? lockdep_hardirqs_on+0x78/0x100 [ 127.647198][ T7156] do_fast_syscall_32+0x32/0x70 [ 127.647219][ T7156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.647242][ T7156] RIP: 0023:0xf705efec [ 127.647264][ T7156] Code: Unable to access opcode bytes at 0xf705efc2. [ 127.647273][ T7156] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 127.647289][ T7156] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000002b22cb6c [ 127.647300][ T7156] RDX: 0000000080000400 RSI: 0000000000000001 RDI: 0000000000000000 [ 127.647311][ T7156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.647320][ T7156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.647330][ T7156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.647355][ T7156] [ 127.779448][ T29] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 127.795419][ T7160] Process accounting resumed [ 127.796707][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.804408][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 127.809292][ T29] usb 5-1: media controller created [ 127.822687][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.053754][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 128.085004][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 128.097275][ T7171] syzkaller0: entered promiscuous mode [ 128.109313][ T7171] syzkaller0: entered allmulticast mode [ 128.172071][ T5754] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.319121][ T29] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 128.321250][ T5754] usb 7-1: Using ep0 maxpacket: 8 [ 128.360389][ T29] usb 5-1: USB disconnect, device number 2 [ 128.449389][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.455746][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.606743][ T7176] tmpfs: Unknown parameter 'noswÒÆap' [ 128.895042][ T5754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 128.899210][ T5754] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 128.902642][ T5754] usb 7-1: can't read configurations, error -71 [ 129.529780][ T7191] FAULT_INJECTION: forcing a failure. [ 129.529780][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.535741][ T7191] CPU: 3 UID: 0 PID: 7191 Comm: syz.2.326 Not tainted syzkaller #0 PREEMPT(full) [ 129.535764][ T7191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.535773][ T7191] Call Trace: [ 129.535779][ T7191] [ 129.535787][ T7191] dump_stack_lvl+0x100/0x190 [ 129.535812][ T7191] should_fail_ex.cold+0x5/0xa [ 129.535831][ T7191] _copy_to_user+0x32/0xd0 [ 129.535859][ T7191] simple_read_from_buffer+0xcb/0x170 [ 129.535886][ T7191] proc_fail_nth_read+0x1af/0x230 [ 129.535909][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.535933][ T7191] ? rw_verify_area+0xce/0x6d0 [ 129.535957][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.535979][ T7191] vfs_read+0x1e4/0xb40 [ 129.536009][ T7191] ? __pfx_vfs_read+0x10/0x10 [ 129.536032][ T7191] ? find_held_lock+0x2b/0x80 [ 129.536054][ T7191] ? __fget_files+0x215/0x3d0 [ 129.536074][ T7191] ? __fget_files+0x21f/0x3d0 [ 129.536095][ T7191] ksys_read+0x12a/0x250 [ 129.536110][ T7191] ? __pfx_ksys_read+0x10/0x10 [ 129.536130][ T7191] do_int80_emulation+0x14b/0x720 [ 129.536153][ T7191] asm_int80_emulation+0x1a/0x20 [ 129.536169][ T7191] RIP: 0023:0xf71972eb [ 129.536183][ T7191] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 129.536198][ T7191] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 129.536215][ T7191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0 [ 129.536224][ T7191] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 129.536233][ T7191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.536241][ T7191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.536250][ T7191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.536273][ T7191] [ 130.051329][ T5754] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 130.224582][ T5754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.229947][ T5754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.238118][ T5754] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.244774][ T5754] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.249326][ T5754] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.280014][ T5754] usb 7-1: config 0 descriptor?? [ 130.714852][ T7197] syzkaller1: entered promiscuous mode [ 130.717500][ T7197] syzkaller1: entered allmulticast mode [ 130.738510][ T5754] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 130.823378][ T5754] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 130.984448][ T5754] usb 7-1: USB disconnect, device number 7 [ 131.608802][ T7213] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 131.642392][ T7212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.720482][ T7213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.235007][ T7236] 9p: Bad value for 'version' [ 132.474891][ T7239] syzkaller1: entered promiscuous mode [ 132.477430][ T7239] syzkaller1: entered allmulticast mode [ 132.633166][ T7250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 132.635954][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.639583][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 132.667749][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 132.709507][ T7256] syzkaller0: entered promiscuous mode [ 132.709532][ T7256] syzkaller0: entered allmulticast mode [ 132.733387][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.807353][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.807437][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.896580][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 132.901477][ T56] usb 44-1: SetAddress Request (6) to port 0 [ 132.903720][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 132.907658][ T56] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 132.912999][ T41] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 132.918530][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.941730][ T41] usb 5-1: config 0 descriptor?? [ 132.948191][ T7239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.968635][ T7250] wg2 speed is unknown, defaulting to 1000 [ 132.979826][ T7250] wg2 speed is unknown, defaulting to 1000 [ 133.008847][ T7250] wg2 speed is unknown, defaulting to 1000 [ 133.048739][ T7266] fuse: Unknown parameter '000000000000000000000030x0000000000000003Hû.Ò홨ÖÞá–¥ÌÉWÎQ+Ô' [ 133.133513][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 133.137661][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 133.141098][ T7274] netlink: 'syz.2.346': attribute type 12 has an invalid length. [ 133.155009][ T41] usbhid 5-1:0.0: can't add hid device: -71 [ 133.161299][ T41] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.174011][ T41] usb 5-1: USB disconnect, device number 3 [ 133.194722][ T7251] vhci_hcd: connection reset by peer [ 133.202920][ T13] vhci_hcd vhci_hcd.3: stop threads [ 133.212723][ T13] vhci_hcd vhci_hcd.3: release socket [ 133.214943][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 133.215468][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 133.347501][ T7281] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 134.482806][ T29] wg2 speed is unknown, defaulting to 1000 [ 134.490391][ T7250] infiniband syz2: set active [ 134.492696][ T7250] infiniband syz2: added wg2 [ 134.555703][ T7250] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 134.562402][ T7250] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 134.570468][ T7250] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 134.605330][ T7250] RDS/IB: syz2: added [ 134.607435][ T7250] smc: adding ib device syz2 with port count 1 [ 134.619870][ T7250] smc: ib device syz2 port 1 has no pnetid [ 134.626691][ T29] wg2 speed is unknown, defaulting to 1000 [ 134.642890][ T7250] wg2 speed is unknown, defaulting to 1000 [ 135.125325][ T7250] wg2 speed is unknown, defaulting to 1000 [ 135.130510][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 135.134044][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 135.507685][ T7250] wg2 speed is unknown, defaulting to 1000 [ 135.541317][ T5754] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 135.716727][ T5754] usb 6-1: Using ep0 maxpacket: 32 [ 135.729835][ T5754] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.733565][ T5754] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.738727][ T5754] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.745074][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.749345][ T5754] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.754267][ T5754] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.788230][ T5754] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.791927][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.797801][ T5754] usb 6-1: config 0 descriptor?? [ 135.852006][ T7308] wg2 speed is unknown, defaulting to 1000 [ 136.013083][ T5754] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.039690][ T7326] raw_sendmsg: syz.0.360 forgot to set AF_INET. Fix it! [ 136.078684][ T29] libceph: connect (1)[c::]:6789 error -101 [ 136.088571][ T7250] wg2 speed is unknown, defaulting to 1000 [ 136.093964][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 136.122556][ T5101] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 136.128979][ T7326] ceph: No mds server is up or the cluster is laggy [ 136.154590][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 136.242859][ T5101] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 136.265028][ C2] usblp0: nonzero read bulk status received: -71 [ 136.281790][ T41] usb 6-1: USB disconnect, device number 8 [ 136.352382][ T29] libceph: connect (1)[c::]:6789 error -101 [ 136.363497][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 136.700534][ T7333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.720319][ T5754] wg2 speed is unknown, defaulting to 1000 [ 136.842851][ T7322] usblp0: removed [ 137.113710][ T42] audit: type=1800 audit(1785009109.269:10): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.365" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 137.152309][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 137.318216][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 137.412570][ T7361] binder: 7360:7361 ioctl 80805659 800001c0 returned -22 [ 137.666698][ T6060] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.724714][ T7370] afs: Unknown parameter '¸vÀ-Ë2Mœ»§á×ÈÌÄËšq\ž' [ 137.811321][ T6060] usb 5-1: Using ep0 maxpacket: 8 [ 137.811364][ T5754] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 137.815208][ T6060] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.820836][ T6060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.833556][ T6060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 137.839110][ T6060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 137.844455][ T6060] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 137.848321][ T6060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.867360][ T6060] hub 5-1:1.0: bad descriptor, ignoring hub [ 137.872554][ T6060] hub 5-1:1.0: probe with driver hub failed with error -5 [ 137.875994][ T6060] cdc_wdm 5-1:1.0: skipping garbage [ 137.878171][ T6060] cdc_wdm 5-1:1.0: skipping garbage [ 137.880401][ T6060] cdc_wdm 5-1:1.0: skipping garbage [ 137.885464][ T6060] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 137.887807][ T6060] cdc_wdm 5-1:1.0: Unknown control protocol [ 137.984818][ T56] usb 44-1: device descriptor read/8, error -110 [ 137.994611][ T5754] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.011302][ T5754] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.100888][ T5754] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.105416][ T5754] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.112630][ T5754] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.116374][ T5754] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.120339][ T5754] usb 8-1: Manufacturer: syz [ 138.133252][ T5754] usb 8-1: config 0 descriptor?? [ 138.139508][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.147205][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.153544][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.156813][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.159909][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.163251][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.166210][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.179436][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.182595][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.185699][ T4753] hid-generic 0002:0008:0001.0004: unknown main item tag 0x0 [ 138.206460][ T4753] hid-generic 0002:0008:0001.0004: hidraw1: HID v0.04 Device [syz1] on syz0 [ 138.340225][ T7380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.376'. [ 138.403772][ T56] usb usb44-port1: attempt power cycle [ 138.564748][ T5754] appleir 0003:05AC:8243.0005: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 138.813265][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.860811][ T5864] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 138.874076][ T5864] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 138.892392][ T1356] usb 8-1: USB disconnect, device number 5 [ 138.902019][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.972732][ T56] usb usb44-port1: unable to enumerate USB device [ 138.986147][ T1163] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 139.010744][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 139.028518][ T7405] smbdirect: ib_dev[syz1] renamed to [syz0] [ 139.061862][ T4753] usb 5-1: USB disconnect, device number 4 [ 139.108079][ T1163] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 139.221564][ T1163] wlan1: authentication with 08:02:11:00:00:00 timed out [ 139.471271][ T1356] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 139.647556][ T1356] usb 8-1: Using ep0 maxpacket: 8 [ 139.776673][ T1356] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.781636][ T1356] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 139.785568][ T1356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.791965][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.794886][ T1356] usb 8-1: config 0 descriptor?? [ 139.807448][ T1356] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 139.942049][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 139.948808][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.954547][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.960781][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.968688][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.972045][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.978050][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.983806][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 139.987801][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 139.994434][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.999980][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.004438][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.012073][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.017109][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.020466][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.025728][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.025844][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 140.034326][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.038118][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.041851][ T56] usb 8-1: USB disconnect, device number 6 [ 140.044636][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.053093][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.057753][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.066950][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.075535][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.080221][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.088087][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.098197][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 140.102339][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 140.107208][ T34] usb 5-1: Product: syz [ 140.110370][ T34] usb 5-1: Manufacturer: syz [ 140.112174][ T34] usb 5-1: SerialNumber: syz [ 140.118060][ T34] usb 5-1: config 0 descriptor?? [ 140.135208][ T34] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 140.642648][ T56] usb 5-1: USB disconnect, device number 5 [ 140.647789][ T56] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 140.649842][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 140.653017][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.670985][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.826179][ T7411] geneve2: left allmulticast mode [ 140.834369][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.838887][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.843479][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.861672][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.199276][ T7473] lo: left allmulticast mode [ 141.247810][ T7467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 141.250296][ T7467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 141.259553][ T7467] vhci_hcd vhci_hcd.0: Device attached [ 141.355087][ T7467] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 141.521118][ T1356] usb 40-1: SetAddress Request (14) to port 0 [ 141.525961][ T1356] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 141.626401][ T7467] tipc: Resetting bearer [ 141.716174][ T7467] bridge1: left promiscuous mode [ 141.725000][ T7467] macvlan2: left promiscuous mode [ 141.732591][ T7467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.750716][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.759910][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.764311][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.767098][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.862375][ T7478] vhci_hcd: connection reset by peer [ 141.865089][ T12] vhci_hcd vhci_hcd.1: stop threads [ 141.870264][ T12] vhci_hcd vhci_hcd.1: release socket [ 141.873783][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 142.813974][ T7539] netlink: zone id is out of range [ 142.823222][ T7539] netlink: zone id is out of range [ 142.830891][ T7539] netlink: zone id is out of range [ 142.835544][ T7539] netlink: zone id is out of range [ 142.839874][ T7539] netlink: zone id is out of range [ 142.843836][ T7539] netlink: zone id is out of range [ 142.846550][ T7539] netlink: zone id is out of range [ 142.850706][ T7539] netlink: zone id is out of range [ 142.853746][ T7539] netlink: zone id is out of range [ 142.858225][ T7539] netlink: zone id is out of range [ 143.576021][ T5101] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 143.700018][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 144.118817][ T7544] netlink: 'syz.1.411': attribute type 7 has an invalid length. [ 144.131214][ T7544] netlink: 'syz.1.411': attribute type 8 has an invalid length. [ 144.189764][ T7572] syz_tun: entered allmulticast mode [ 144.338387][ T7571] syz_tun: left allmulticast mode [ 145.313439][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 145.317084][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 145.337564][ T7595] fuse: fd is not a fuse device [ 145.403947][ T7598] fuse: fd is not a fuse device [ 145.412217][ T7598] fuse: fd is not a fuse device [ 145.548574][ T7606] evm: overlay not supported [ 146.372838][ T7641] netlink: 'syz.1.433': attribute type 2 has an invalid length. [ 146.460539][ T7641] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 146.621410][ T1356] usb 40-1: device descriptor read/8, error -110 [ 146.625744][ T7648] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 146.670829][ T7648] bond3: entered allmulticast mode [ 146.739926][ T7648] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 146.744065][ T7648] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 146.754594][ T7648] bond3: (slave vti0): making interface the new active one [ 146.757560][ T7648] vti0: entered allmulticast mode [ 146.794457][ T7648] vti0: left allmulticast mode [ 146.916522][ T7665] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 146.923583][ T7665] netlink: 208 bytes leftover after parsing attributes in process `syz.3.438'. [ 147.011419][ T1356] usb usb40-port1: attempt power cycle [ 147.310764][ T7674] trusted_key: syz.0.441 sent an empty control message without MSG_MORE. [ 147.320599][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 147.470427][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 147.482172][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 147.491293][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.506407][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.520928][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.550437][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.572218][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.585722][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.701216][ T1356] usb usb40-port1: unable to enumerate USB device [ 147.838760][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'. [ 147.887702][ T7683] mmap: syz.1.444 (7683) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.898795][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 147.904536][ T29] usb 8-1: usb_control_msg returned -32 [ 147.937417][ T29] usbtmc 8-1:16.0: can't read capabilities [ 148.195156][ T7690] net_ratelimit: 10 callbacks suppressed [ 148.195175][ T7690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.323453][ T1356] kernel read not supported for file /adsp1 (pid: 1356 comm: kworker/0:2) [ 148.338936][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'. [ 148.979190][ T7704] overlay: Unknown parameter 'obj_type' [ 149.420393][ T7719] tmpfs: Unknown parameter 'Ç×mpol' [ 149.787328][ T7722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'. [ 149.791776][ T7722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'. [ 149.798497][ T7722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'. [ 150.008516][ T4753] usb 8-1: USB disconnect, device number 7 [ 150.590365][ T7758] overlayfs: failed to clone upperpath [ 150.904338][ T7761] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 150.962976][ T7763] cgroup: release_agent respecified [ 151.064484][ T7766] input: syz0 as /devices/virtual/input/input12 [ 151.365597][ T7765] syz.0.468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.371802][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.0.468 Not tainted syzkaller #0 PREEMPT(full) [ 151.371830][ T7765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.371842][ T7765] Call Trace: [ 151.371847][ T7765] [ 151.371854][ T7765] dump_stack_lvl+0x100/0x190 [ 151.371880][ T7765] warn_alloc.cold+0x94/0xa8 [ 151.371898][ T7765] ? __pfx_warn_alloc+0x10/0x10 [ 151.371920][ T7765] ? kasan_save_stack+0x3f/0x50 [ 151.371942][ T7765] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 151.371957][ T7765] ? xskq_create+0x52/0x1d0 [ 151.371972][ T7765] ? xsk_setsockopt+0x743/0xab0 [ 151.371987][ T7765] ? do_sock_setsockopt+0xf3/0x1d0 [ 151.372012][ T7765] ? __sys_setsockopt+0x119/0x190 [ 151.372032][ T7765] ? __ia32_sys_setsockopt+0xbc/0x160 [ 151.372051][ T7765] ? __do_fast_syscall_32+0xe7/0x970 [ 151.372072][ T7765] ? do_fast_syscall_32+0x32/0x70 [ 151.372096][ T7765] ? xskq_create+0xfb/0x1d0 [ 151.372113][ T7765] __vmalloc_node_range_noprof+0x136c/0x1630 [ 151.372148][ T7765] ? xskq_create+0xfb/0x1d0 [ 151.372171][ T7765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.372200][ T7765] ? kasan_save_track+0x14/0x30 [ 151.372220][ T7765] ? __kasan_kmalloc+0xaa/0xb0 [ 151.372240][ T7765] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 151.372257][ T7765] ? xskq_create+0xfb/0x1d0 [ 151.372273][ T7765] vmalloc_user_noprof+0x9e/0xe0 [ 151.372297][ T7765] ? xskq_create+0xfb/0x1d0 [ 151.372313][ T7765] xskq_create+0xfb/0x1d0 [ 151.372333][ T7765] xsk_setsockopt+0x743/0xab0 [ 151.372349][ T7765] ? __pfx_aa_sk_perm+0x10/0x10 [ 151.372386][ T7765] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.372400][ T7765] ? find_held_lock+0x2b/0x80 [ 151.372424][ T7765] ? aa_sock_opt_perm+0xfe/0x1b0 [ 151.372442][ T7765] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.372459][ T7765] do_sock_setsockopt+0xf3/0x1d0 [ 151.372489][ T7765] __sys_setsockopt+0x119/0x190 [ 151.372515][ T7765] __ia32_sys_setsockopt+0xbc/0x160 [ 151.372535][ T7765] ? __do_fast_syscall_32+0x98/0x970 [ 151.372555][ T7765] ? lockdep_hardirqs_on+0x78/0x100 [ 151.372581][ T7765] __do_fast_syscall_32+0xe7/0x970 [ 151.372610][ T7765] ? lockdep_hardirqs_on+0x78/0x100 [ 151.372630][ T7765] do_fast_syscall_32+0x32/0x70 [ 151.372654][ T7765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.372675][ T7765] RIP: 0023:0xf703efec [ 151.372691][ T7765] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 151.372706][ T7765] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 151.372724][ T7765] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000011b [ 151.372735][ T7765] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 151.372745][ T7765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.372754][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.372764][ T7765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.372787][ T7765] [ 151.372794][ T7765] Mem-Info: [ 151.508742][ T7765] active_anon:21324 inactive_anon:1409 isolated_anon:0 [ 151.508742][ T7765] active_file:5046 inactive_file:21953 isolated_file:0 [ 151.508742][ T7765] unevictable:1768 dirty:294 writeback:0 [ 151.508742][ T7765] slab_reclaimable:7788 slab_unreclaimable:67298 [ 151.508742][ T7765] mapped:25035 shmem:18652 pagetables:1158 [ 151.508742][ T7765] sec_pagetables:297 bounce:0 [ 151.508742][ T7765] kernel_misc_reclaimable:0 [ 151.508742][ T7765] free:31330 free_pcp:15158 free_cma:0 [ 151.534864][ T7765] Node 0 active_anon:36kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:1308kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.550823][ T7765] Node 1 active_anon:76760kB inactive_anon:5612kB active_file:20184kB inactive_file:87812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100112kB dirty:1176kB writeback:0kB shmem:62672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6256kB pagetables:3324kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 151.567247][ T7765] Node 0 DMA free:2760kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 151.584463][ T7765] lowmem_reserve[]: 0 280 280 280 280 [ 151.588002][ T7765] Node 0 DMA32 free:19812kB boost:6144kB min:18916kB low:22108kB high:25300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:0kB present:1032196kB managed:286968kB mlocked:0kB bounce:0kB free_pcp:8632kB local_pcp:2092kB free_cma:0kB [ 151.603537][ T7765] lowmem_reserve[]: 0 0 0 0 0 [ 151.606168][ T7765] Node 1 DMA32 free:118948kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68560kB inactive_anon:5612kB active_file:20184kB inactive_file:87812kB unevictable:3536kB writepending:1176kB zspages:1924kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:52500kB local_pcp:8352kB free_cma:0kB [ 151.626285][ T7765] lowmem_reserve[]: 0 0 0 0 0 [ 151.629976][ T7765] Node 0 DMA: 92*4kB (U) 13*8kB (U) 5*16kB (U) 17*32kB (U) 8*64kB (U) 3*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2760kB [ 151.635753][ T7765] Node 0 DMA32: 175*4kB (UE) 115*8kB (UME) 23*16kB (UE) 171*32kB (UE) 49*64kB (UE) 18*128kB (UE) 5*256kB (UM) 5*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 19812kB [ 151.643944][ T7765] Node 1 DMA32: 1534*4kB (UME) 915*8kB (UME) 550*16kB (UME) 262*32kB (UME) 206*64kB (UME) 79*128kB (UME) 34*256kB (UME) 12*512kB (UME) 9*1024kB (UM) 8*2048kB (UM) 6*4096kB (U) = 118960kB [ 151.660987][ T7765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.665254][ T7765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.669144][ T7765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.674267][ T7765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.678873][ T7765] 42154 total pagecache pages [ 151.681010][ T7765] 632 pages in swap cache [ 151.682943][ T7765] Free swap = 116824kB [ 151.685054][ T7765] Total swap = 124996kB [ 151.686896][ T7765] 524155 pages RAM [ 151.688788][ T7765] 0 pages HighMem/MovableOnly [ 151.690968][ T7765] 211520 pages reserved [ 151.692496][ T7765] 0 pages cma reserved [ 152.602828][ T7796] trusted_key: encrypted_key: master key parameter '' is invalid [ 152.628708][ T7796] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 152.634313][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.643620][ T7796] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.779217][ T7796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.785473][ T7796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.798080][ T7796] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 152.806224][ T7796] bond0 (unregistering): Released all slaves qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 153.545709][ T7826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.481'. [ 153.842937][ T7835] tmpfs: Bad value for 'mpol' [ 153.929291][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 154.009345][ T42] audit: type=1800 audit(1785009382.171:11): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.485" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 154.046649][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 154.208708][ T7446] hid_parser_main: 8 callbacks suppressed [ 154.208796][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.218029][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.223719][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.229799][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.232867][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.235868][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.240764][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.246165][ T7446] hid-generic 0006:0008:0003.0006: unknown main item tag 0x0 [ 154.262285][ T7446] hid-generic 0006:0008:0003.0006: hidraw1: VIRTUAL HID vd.67 Device [syz1] on syz0 [ 154.599600][ T1356] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 156.173676][ T7884] qrtr: Invalid version 0 [ 156.176805][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 156.182348][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 156.201885][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 156.245187][ T7884] syzkaller1: entered promiscuous mode [ 156.254977][ T7884] syzkaller1: entered allmulticast mode [ 156.537578][ T7888] xt_socket: unknown flags 0xd0 [ 157.117301][ T7895] wg2 speed is unknown, defaulting to 1000 [ 157.447989][ T7906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.503'. [ 157.917368][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 158.078184][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 158.081510][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 159.092770][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 159.135605][ T7923] sch_fq: defrate 2 ignored. [ 159.159205][ T7927] overlayfs: upper fs does not support file handles, falling back to index=off. [ 159.163730][ T7927] overlayfs: failed to set uuid (117/file2, err=-1); falling back to uuid=null. [ 159.650665][ T5101] Bluetooth: hci3: unexpected event for opcode 0x202d [ 161.330675][ T42] audit: type=1804 audit(1785009389.502:12): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.519" name="cgroup.controllers" dev="tmpfs" ino=817 res=1 errno=0 [ 161.351222][ T42] audit: type=1800 audit(1785009389.512:13): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.519" name="cgroup.controllers" dev="tmpfs" ino=817 res=0 errno=0 [ 161.738798][ T41] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 161.960205][ T5101] Bluetooth: hci3: Malformed Event: 0x2f [ 162.011249][ T5101] Bluetooth: hci3: Malformed Event: 0x2f [ 162.019308][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 162.077272][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 162.141771][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.522'. [ 162.143710][ T41] usb 8-1: config index 0 descriptor too short (expected 12827, got 27) [ 162.227676][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 162.229810][ T41] usb 8-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 162.233041][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 162.888505][ T41] usb 8-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 162.892679][ T41] usb 8-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 162.905732][ T41] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.910164][ T41] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.913531][ T41] usb 8-1: Product: syz [ 162.915437][ T41] usb 8-1: Manufacturer: syz [ 162.917427][ T41] usb 8-1: SerialNumber: syz [ 163.206130][ T41] usb 8-1: USB disconnect, device number 8 [ 163.267415][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 163.824416][ T8009] wg2 speed is unknown, defaulting to 1000 [ 164.962838][ T8036] tmpfs: Unknown parameter 'nn•×Û7‰¾>­xoswap' [ 164.977932][ T8039] binder: 8037:8039 ioctl c00c620f 800003c0 returned -22 [ 165.609977][ T8057] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 165.746137][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 165.931282][ T8067] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 166.829914][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.834085][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.837995][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.841873][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.206257][ T8098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.548'. [ 167.212841][ T8098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.548'. [ 167.589141][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 167.828207][ T42] audit: type=1326 audit(1785009396.003:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.0.553" exe="/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf703efec code=0x0 [ 168.429464][ T8129] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 168.436445][ T8129] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 168.446441][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 168.447034][ T8129] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 168.639563][ T8136] Bluetooth: MGMT ver 1.23 [ 168.920920][ T8142] tipc: Enabled bearer , priority 10 [ 169.382009][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 169.386221][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 170.116254][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 170.121785][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 170.659426][ T8205] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 171.187851][ T7446] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 171.458680][ T7446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.463321][ T7446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.468245][ T7446] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.476236][ T7446] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.490103][ T7446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.498767][ T7446] usb 6-1: config 0 descriptor?? [ 171.710082][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 171.716053][ T8223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.575'. [ 171.948292][ T7446] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 172.097535][ T56] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 172.417532][ T56] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.545018][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.547573][ T56] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 172.564453][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.605041][ T7442] usb 6-1: USB disconnect, device number 10 [ 172.697936][ T56] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.720619][ T56] usb usb5-port1: attempt power cycle [ 172.799150][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 173.077651][ T56] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 173.099759][ T56] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.237797][ T56] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 173.270469][ T56] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.279666][ T56] usb usb5-port1: unable to enumerate USB device [ 174.282527][ T8267] wg2 speed is unknown, defaulting to 1000 [ 174.531950][ T8277] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.600907][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 174.712299][ T8286] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 174.755334][ T8286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.817721][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 174.837521][ T7442] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.874256][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 174.879630][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.590'. [ 174.999419][ T7442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.004055][ T7442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.008660][ T7442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.014094][ T7442] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.018338][ T7442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.025108][ T7442] usb 6-1: config 0 descriptor?? [ 175.163547][ T8295] binder_alloc: binder_alloc_mmap_handler: 8293 80ffd000-81000000 already mapped failed -16 [ 175.170179][ T8295] binder: BINDER_SET_CONTEXT_MGR already set [ 175.174359][ T8295] binder: 8293:8295 ioctl 4018620d 80004a80 returned -16 [ 175.178748][ T8294] binder_alloc: 8293: binder_alloc_buf, no vma [ 175.180263][ T8295] binder_alloc: 8293: binder_alloc_buf, no vma [ 175.272739][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 175.485755][ T7442] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 175.522407][ T7442] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.565469][ T8303] team0 (unregistering): Port device team_slave_0 removed [ 175.572493][ T8303] team0 (unregistering): Port device team_slave_1 removed [ 175.749346][ T7442] usb 6-1: USB disconnect, device number 11 [ 176.247004][ T8312] trusted_key: encrypted_key: insufficient parameters specified [ 176.639130][ T1356] libceph: connect (1)[c::]:6789 error -101 [ 176.642800][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 176.650889][ T5101] Bluetooth: hci3: unexpected event for opcode 0x99d8 [ 176.707640][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 176.907762][ T8327] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 176.910577][ T8327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.910935][ T1356] libceph: connect (1)[c::]:6789 error -101 [ 176.914035][ T8327] vhci_hcd vhci_hcd.0: Device attached [ 176.928811][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 177.001891][ T8327] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 177.197636][ T5842] usb 40-1: SetAddress Request (18) to port 0 [ 177.200474][ T5842] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 177.298411][ T8328] vhci_hcd: connection reset by peer [ 177.304052][ T12] vhci_hcd vhci_hcd.1: stop threads [ 177.308855][ T12] vhci_hcd vhci_hcd.1: release socket [ 177.313862][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 177.404116][ T8320] ceph: No mds server is up or the cluster is laggy [ 177.450276][ T1356] libceph: connect (1)[c::]:6789 error -101 [ 177.453396][ T1356] libceph: mon0 (1)[c::]:6789 connect error [ 178.651473][ T8372] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.696913][ T8375] xt_hashlimit: max too large, truncated to 1048576 [ 178.724401][ T8378] ip6gretap0: entered promiscuous mode [ 178.790766][ T8380] vivid-000: disconnect [ 178.891924][ T8380] vivid-000: reconnect [ 178.961086][ T42] audit: type=1326 audit(1785009406.130:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.0.618" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 179.387671][ T1356] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 179.552204][ T1356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.556979][ T1356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.561555][ T1356] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.567765][ T1356] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.571686][ T1356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.581049][ T1356] usb 6-1: config 0 descriptor?? [ 180.065436][ T1356] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 180.075504][ T1356] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.265000][ T8429] futex_wake_op: syz.0.627 tries to shift op by 32; fix this program [ 180.271970][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 180.577724][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.737552][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 180.741729][ T41] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 180.749305][ T41] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.752702][ T41] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.755737][ T41] usb 5-1: Product: syz [ 180.757251][ T41] usb 5-1: Manufacturer: syz [ 180.759160][ T41] usb 5-1: SerialNumber: syz [ 180.763156][ T41] usb 5-1: config 0 descriptor?? [ 180.769616][ T8434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.773679][ T41] hub 5-1:0.0: bad descriptor, ignoring hub [ 180.775818][ T41] hub 5-1:0.0: probe with driver hub failed with error -5 [ 180.778648][ T1168] wlan1: Trigger new scan to find an IBSS to join [ 180.821776][ T7442] usb 6-1: USB disconnect, device number 12 [ 181.041173][ T8459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.078241][ T6874] usb 5-1: USB disconnect, device number 10 [ 181.093417][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.633'. [ 181.109336][ T8461] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 181.190484][ T8470] tmpfs: Unknown parameter ' É«3‚ù¬àgrpquota_block_ha.†½–Èrdlimit' [ 181.252707][ T8474] fuse: Bad value for 'fd' [ 181.310878][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 181.354477][ T8478] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 181.495127][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.649477][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.654379][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.659690][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.665021][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.669441][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.676889][ T9] usb 5-1: config 0 descriptor?? [ 181.902115][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.914715][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.261547][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 182.297674][ T5842] usb 40-1: device descriptor read/8, error -110 [ 182.587569][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 182.590124][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.596508][ T9] usb 5-1: USB disconnect, device number 11 [ 182.688479][ T5842] usb usb40-port1: attempt power cycle [ 183.145559][ T8509] rdma_rxe: rxe_newlink: failed to add wg2 [ 183.248523][ T5842] usb usb40-port1: unable to enumerate USB device [ 183.817689][ T6425] wlan1: Trigger new scan to find an IBSS to join [ 184.032939][ T5101] Bluetooth: hci3: unexpected event for opcode 0x202d [ 184.766571][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.657526][ T8576] netlink: 'syz.0.664': attribute type 11 has an invalid length. [ 185.740394][ T8580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.665'. [ 185.745724][ T8580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.665'. [ 185.792723][ T8585] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 185.821951][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 186.805276][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.672'. [ 187.023396][ T8615] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 187.029133][ T8615] netlink: 396 bytes leftover after parsing attributes in process `syz.3.673'. [ 187.038906][ T8618] sctp: [Deprecated]: syz.0.674 (pid 8618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.038906][ T8618] Use struct sctp_sack_info instead [ 187.161873][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 187.165514][ T8624] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 187.169407][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 187.607619][ T6874] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 187.728585][ T8640] overlayfs: failed to clone upperpath [ 187.770377][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.780454][ T6874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.793321][ T6874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.805227][ T6874] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.809430][ T6874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.819255][ T6874] usb 6-1: config 0 descriptor?? [ 187.828521][ T8640] fuse: fd is not a fuse device [ 188.179343][ T8651] loop9: detected capacity change from 0 to 2640 [ 188.195515][ T8651] buffer_io_error: 5 callbacks suppressed [ 188.195532][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.229751][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.241285][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.256165][ T6874] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 188.264394][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.278950][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.298132][ T6874] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 188.372649][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.378074][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.383297][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.386539][ T8651] ldm_validate_partition_table(): Disk read failed. [ 188.391017][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.395308][ T8651] Buffer I/O error on dev loop9, logical block 0, async page read [ 188.398736][ T8651] Dev loop9: unable to read RDB block 0 [ 188.417365][ T8651] loop9: unable to read partition table [ 188.420077][ T8651] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 188.499665][ T6874] usb 6-1: USB disconnect, device number 13 [ 188.665655][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 189.746912][ T8690] vlan3: entered allmulticast mode [ 189.749388][ T8690] bond0: entered allmulticast mode [ 189.751622][ T8690] bond_slave_0: entered allmulticast mode [ 189.755557][ T8690] bond_slave_1: entered allmulticast mode [ 189.793399][ T8690] atomic_op ffff8880141e2198 conn xmit_atomic 0000000000000000 [ 189.800509][ T8690] overlayfs: failed to clone lowerpath [ 189.814098][ T8690] overlayfs: failed to clone lowerpath [ 190.004687][ T8703] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 190.258209][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 191.289108][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 191.441960][ T8720] fuse: fd is not a fuse device [ 191.503478][ T8725] ip6gretap1: entered allmulticast mode [ 191.507130][ T8725] batman_adv: batadv0: Adding interface: ip6gretap1 [ 191.510844][ T8725] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.520759][ T8725] batman_adv: batadv0: Interface activated: ip6gretap1 [ 191.882721][ T8707] wg2 speed is unknown, defaulting to 1000 [ 194.067234][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 194.073768][ T42] audit: type=1326 audit(1785009421.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.087319][ T42] audit: type=1326 audit(1785009421.240:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.111568][ T42] audit: type=1326 audit(1785009421.240:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.127127][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 194.144664][ T42] audit: type=1326 audit(1785009421.240:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.178753][ T42] audit: type=1326 audit(1785009421.240:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.193103][ T42] audit: type=1326 audit(1785009421.240:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.203272][ T42] audit: type=1326 audit(1785009421.250:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.212083][ T42] audit: type=1326 audit(1785009421.250:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.231347][ T42] audit: type=1326 audit(1785009421.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.232172][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244838][ T42] audit: type=1326 audit(1785009421.250:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 194.339857][ T8792] overlayfs: missing 'lowerdir' [ 194.412187][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 194.467545][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 194.629436][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.642243][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.650272][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.655549][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.659690][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.665731][ T29] usb 8-1: config 0 descriptor?? [ 194.910325][ T8808] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 195.089188][ T29] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 195.090704][ T5101] Bluetooth: hci3: unexpected event for opcode 0x202d [ 195.103159][ T29] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 195.322732][ T8820] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 195.326162][ T8820] netlink: 756 bytes leftover after parsing attributes in process `syz.1.725'. [ 195.341606][ T7446] usb 8-1: USB disconnect, device number 9 [ 196.909179][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 203.475072][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.729'. [ 203.480979][ T8851] netlink: 'syz.1.729': attribute type 16 has an invalid length. [ 203.484084][ T8851] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 203.488964][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.729'. [ 203.499150][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 203.530794][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 203.542839][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 203.546238][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 203.787832][ T6874] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 203.960311][ T6874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.970162][ T6874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.979231][ T6874] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.992269][ T6874] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.000614][ T6874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.013949][ T6874] usb 8-1: config 0 descriptor?? [ 204.054816][ T8851] veth5: entered allmulticast mode [ 204.189084][ T8851] bond2: (slave veth5): Enslaving as an active interface with an up link [ 204.352454][ T8861] bond2 (unregistering): (slave veth5): Releasing backup interface [ 204.364744][ T8861] bond2 (unregistering): Released all slaves [ 204.753039][ T6874] usbhid 8-1:0.0: can't add hid device: -71 [ 204.762149][ T6874] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 204.787968][ T6874] usb 8-1: USB disconnect, device number 10 [ 205.569065][ T8895] 9pnet_virtio: no channels available for device c::: [ 206.138151][ T8879] syz.2.732 (8879) used greatest stack depth: 19104 bytes left [ 206.153690][ T5101] Bluetooth: hci1: unexpected event for opcode 0x202d [ 206.612562][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 206.790047][ T8944] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 207.300136][ T8940] wg2 speed is unknown, defaulting to 1000 [ 207.445613][ T8951] binder_alloc: 8950: binder_alloc_buf, no vma [ 208.086271][ T8963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'. [ 208.722381][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 209.349668][ T8991] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004 [ 209.513041][ T9002] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 209.534848][ T9002] netlink: 244 bytes leftover after parsing attributes in process `syz.1.763'. [ 211.428167][ T9070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.775'. [ 211.437675][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.599783][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.607470][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.616719][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.625758][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.639642][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.649575][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.654263][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.662128][ T34] usb 5-1: Product: syz [ 211.665745][ T34] usb 5-1: Manufacturer: syz [ 211.678595][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 211.688424][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 211.697853][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 211.703550][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 212.113739][ T5842] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 213.526310][ T9116] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 213.559644][ T9116] syz_tun: entered promiscuous mode [ 213.582951][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 213.586069][ T9116] syz_tun: entered allmulticast mode [ 213.652263][ T9116] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.741314][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 213.767851][ T9121] hsr_slave_0: left promiscuous mode [ 213.907701][ T9121] hsr_slave_1: left promiscuous mode [ 214.216455][ T1356] usb 5-1: USB disconnect, device number 12 [ 214.275912][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 215.807075][ T9165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.794'. [ 215.811400][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.794'. [ 215.815553][ T9165] unsupported nlmsg_type 40 [ 215.857908][ T9165] syzkaller0: entered promiscuous mode [ 215.862378][ T9165] syzkaller0: entered allmulticast mode [ 216.259185][ T6874] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 216.333590][ T5101] Bluetooth: hci2: unexpected event for opcode 0x202d [ 216.417573][ T6874] usb 5-1: Using ep0 maxpacket: 8 [ 216.425941][ T6874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.436593][ T6874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.442849][ T6874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.462951][ T6874] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 216.478614][ T6874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.510183][ T6874] hub 5-1:1.0: bad descriptor, ignoring hub [ 216.516831][ T6874] hub 5-1:1.0: probe with driver hub failed with error -5 [ 216.525411][ T6874] cdc_wdm 5-1:1.0: skipping garbage [ 216.530052][ T6874] cdc_wdm 5-1:1.0: skipping garbage [ 216.534646][ T6874] cdc_wdm 5-1:1.0: skipping garbage [ 216.540901][ T6874] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.850215][ T6874] usb 5-1: USB disconnect, device number 13 [ 217.245796][ T9196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.377748][ T9224] netlink: 172 bytes leftover after parsing attributes in process `syz.0.806'. [ 220.378057][ T5101] Bluetooth: hci3: unexpected event for opcode 0x202d [ 220.480565][ T9236] netlink: 'syz.2.808': attribute type 12 has an invalid length. [ 220.629016][ T9231] tipc: Resetting bearer [ 220.732197][ T9231] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 221.212951][ T9253] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 221.215116][ T9253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.223829][ T9253] vhci_hcd vhci_hcd.0: Device attached [ 221.269452][ T9257] vhci_hcd: connection closed [ 221.301522][ T12] vhci_hcd vhci_hcd.1: stop threads [ 221.304898][ T12] vhci_hcd vhci_hcd.1: release socket [ 221.306783][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 221.616646][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.814'. [ 222.365199][ T9290] IPVS: Scheduler module ip_vs_ not found [ 222.489049][ T9282] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 222.570485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 222.941291][ T9301] bridge_slave_0: left allmulticast mode [ 222.945659][ T9301] bridge_slave_0: left promiscuous mode [ 222.951232][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.963886][ T9301] bridge_slave_1: left allmulticast mode [ 222.967469][ T9301] bridge_slave_1: left promiscuous mode [ 222.971311][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.985061][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 222.985076][ T42] audit: type=1326 audit(1785009450.150:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.022614][ T42] audit: type=1326 audit(1785009450.160:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.043013][ T9301] team0: Port device team_slave_0 removed [ 223.046350][ T42] audit: type=1326 audit(1785009450.170:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.059301][ T42] audit: type=1326 audit(1785009450.170:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.060555][ T9301] team0: Port device team_slave_1 removed [ 223.071269][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.075718][ T42] audit: type=1326 audit(1785009450.170:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.080492][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.087350][ T42] audit: type=1326 audit(1785009450.170:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.089987][ T9301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.099515][ T42] audit: type=1326 audit(1785009450.170:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.112985][ T42] audit: type=1326 audit(1785009450.170:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.135915][ T42] audit: type=1326 audit(1785009450.170:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.150803][ T42] audit: type=1326 audit(1785009450.170:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.3.823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 223.651048][ T9305] x_tables: duplicate underflow at hook 1 [ 223.671362][ T9305] x_tables: duplicate underflow at hook 1 [ 223.693713][ T9305] x_tables: duplicate underflow at hook 1 [ 223.708564][ T9305] x_tables: duplicate underflow at hook 1 [ 223.729758][ T9305] x_tables: duplicate underflow at hook 1 [ 223.751587][ T9305] x_tables: duplicate underflow at hook 1 [ 223.772915][ T9305] x_tables: duplicate underflow at hook 1 [ 223.788051][ T9305] x_tables: duplicate underflow at hook 1 [ 223.810412][ T9305] x_tables: duplicate underflow at hook 1 [ 223.832180][ T9305] x_tables: duplicate underflow at hook 1 [ 225.399892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 225.833720][ T9327] geneve2: entered allmulticast mode [ 227.365475][ T9353] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 227.413540][ T9353] @0Ù: renamed from bond_slave_1 (while UP) [ 227.422528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.899716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 228.347585][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.355425][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 228.355441][ T42] audit: type=1326 audit(1785009455.520:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 228.376786][ T42] audit: type=1326 audit(1785009455.540:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.845" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 228.400454][ T42] audit: type=1326 audit(1785009455.540:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 228.438878][ T42] audit: type=1326 audit(1785009455.540:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.845" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705efec code=0x7ffc0000 [ 228.482701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 228.528706][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.532561][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.535701][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.539034][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.580711][ T9380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.602818][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.135466][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 229.135556][ T9] usb 5-1: USB disconnect, device number 14 [ 229.801362][ T9392] IPv6: sit1: Disabled Multicast RS [ 229.808594][ T9392] sit1: entered allmulticast mode [ 229.962457][ T9395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 229.965292][ T9395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.968958][ T9395] vhci_hcd vhci_hcd.0: Device attached [ 230.030711][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 230.125454][ T9396] vhci_hcd: connection closed [ 230.127728][ T12] vhci_hcd vhci_hcd.0: stop threads [ 230.137571][ T12] vhci_hcd vhci_hcd.0: release socket [ 230.144845][ T9353] wg2 speed is unknown, defaulting to 1000 [ 230.152623][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 231.355549][ T9425] overlayfs: failed to clone upperpath [ 231.434499][ T9430] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 231.444721][ T9428] xt_cgroup: path and classid specified [ 231.458663][ T9430] overlayfs: missing 'lowerdir' [ 232.697069][ T9446] overlayfs: failed to clone upperpath [ 235.349770][ T1356] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 235.617913][ T1356] usb 6-1: Using ep0 maxpacket: 16 [ 235.680594][ T1356] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 235.689554][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.751270][ T1356] usb 6-1: Product: syz [ 235.753054][ T1356] usb 6-1: Manufacturer: syz [ 235.782674][ T1356] usb 6-1: SerialNumber: syz [ 236.272467][ T9481] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 236.402820][ T9481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.469468][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 236.542926][ T9474] bond2 (unregistering): Released all slaves [ 236.668348][ T1356] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 236.675605][ T1356] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.682091][ T1356] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 236.685479][ T1356] usb 6-1: media controller created [ 236.696414][ T1356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.711239][ T1356] zl10353_read_register: readreg error (reg=127, ret==-71) [ 236.736022][ T1356] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 236.741650][ T1356] usb 6-1: USB disconnect, device number 14 [ 237.979085][ T9520] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 238.074896][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 242.272573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 242.358264][ T42] audit: type=1326 audit(1785009469.530:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.421725][ T42] audit: type=1326 audit(1785009469.530:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.512391][ T42] audit: type=1326 audit(1785009469.530:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.624217][ T42] audit: type=1326 audit(1785009469.530:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.652854][ T42] audit: type=1326 audit(1785009469.530:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.658713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 242.669795][ T42] audit: type=1326 audit(1785009469.530:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.679152][ T42] audit: type=1326 audit(1785009469.530:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 242.719963][ T42] audit: type=1326 audit(1785009469.530:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.0.885" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 243.218145][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'. [ 243.477558][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 243.677692][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 243.684196][ T9548] wg2 speed is unknown, defaulting to 1000 [ 243.689803][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.694668][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.717528][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.721583][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.773036][ T34] usb 6-1: config 0 descriptor?? [ 244.047530][ T5101] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 244.171715][ T9577] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 244.718166][ T9576] tipc: Resetting bearer [ 244.874383][ T9576] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 245.397472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.133069][ T9582] siw: device registration error -23 [ 246.285923][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 246.297594][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 246.326380][ T34] usb 6-1: USB disconnect, device number 15 [ 246.575607][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 247.375523][ T9612] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 247.448932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 248.131791][ T9612] bond2: entered promiscuous mode [ 248.142566][ T9612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.198271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 248.237699][ T9624] bond2: (slave bridge3): making interface the new active one [ 248.243765][ T9624] bridge3: entered promiscuous mode [ 248.250018][ T9624] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 249.747022][ T9604] wg2 speed is unknown, defaulting to 1000 [ 249.979980][ T1356] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 250.151878][ T1356] usb 5-1: Dual-Role OTG device on HNP port [ 250.163092][ T1356] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 250.167013][ T1356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.258583][ T1356] gspca_main: spca501-2.14.0 probing 0000:0000 [ 250.265301][ T1356] gspca_spca501: reg write: error -32 [ 250.270116][ T1356] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 250.274400][ T1356] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 250.283622][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 250.288191][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 250.291675][ C0] CPU: 0 UID: 0 PID: 1356 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 250.295654][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.300296][ C0] Workqueue: usb_hub_wq hub_event [ 250.303334][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 250.305534][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 250.325586][ C0] RSP: 0000:ffffc900000079e8 EFLAGS: 00010002 [ 250.329078][ C0] RAX: dffffc0000000000 RBX: ffff8880571c4000 RCX: ffffffff87e52009 [ 250.332862][ C0] RDX: 00000000000000e6 RSI: ffffffff87e51e46 RDI: ffff8880571c4128 [ 250.336685][ C0] RBP: ffff8880571c4128 R08: 0000000000000004 R09: 0000000000000020 [ 250.339963][ C0] R10: 0000000000000020 R11: 000000000000756b R12: ffff8880571c40f0 [ 250.342900][ C0] R13: ffff8880571c4128 R14: ffff8880571c4740 R15: 0000000000000001 [ 250.345775][ C0] FS: 0000000000000000(0000) GS:ffff888096be5000(0000) knlGS:0000000000000000 [ 250.349030][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.358395][ C0] CR2: 00000000f7f8a190 CR3: 000000005a384000 CR4: 0000000000352ef0 [ 250.361472][ C0] Call Trace: [ 250.363141][ C0] [ 250.364434][ C0] f_midi2_set_alt+0x444/0x5f0 [ 250.366484][ C0] composite_setup+0x16f8/0x9290 [ 250.368566][ C0] ? __lock_acquire+0x49f/0x1a40 [ 250.370663][ C0] ? print_lock_name+0x41/0x140 [ 250.372765][ C0] ? __pfx_composite_setup+0x10/0x10 [ 250.375108][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.377417][ C0] ? do_raw_spin_lock+0x128/0x260 [ 250.379575][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.381820][ C0] ? configfs_composite_setup+0xfb/0x130 [ 250.384078][ C0] configfs_composite_setup+0xfb/0x130 [ 250.386349][ C0] dummy_timer+0x2062/0x36c0 [ 250.388376][ C0] ? do_raw_spin_lock+0x128/0x260 [ 250.390648][ C0] ? find_held_lock+0x2b/0x80 [ 250.393248][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.397100][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 250.399743][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 250.402360][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 250.405283][ C0] ? mark_held_locks+0x40/0x70 [ 250.408379][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.411079][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 250.413409][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 250.415947][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 250.419306][ C0] handle_softirqs+0x1ea/0x9b0 [ 250.432103][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 250.434319][ C0] ? _raw_spin_unlock+0x28/0x50 [ 250.436362][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 250.438730][ C0] __irq_exit_rcu+0x162/0x210 [ 250.440714][ C0] irq_exit_rcu+0x9/0x30 [ 250.442508][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 250.444932][ C0] [ 250.458756][ C0] [ 250.461277][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.463789][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 250.466460][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 39 2a f6 48 89 df e8 9e 88 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 98 19 f6 65 8b 05 ee 88 a8 08 85 c0 74 16 5b [ 250.474286][ C0] RSP: 0000:ffffc9000702e928 EFLAGS: 00000246 [ 250.476817][ C0] RAX: 0000000000000002 RBX: ffff8880245a8000 RCX: 0000000000000040 [ 250.480083][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a7e36 RDI: ffffffff8c400980 [ 250.483279][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 250.486730][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 250.489984][ C0] R13: ffff88807ad32c78 R14: 0000000000000000 R15: ffff88807ad32c00 [ 250.493334][ C0] dummy_urb_enqueue+0x56c/0x880 [ 250.495645][ C0] ? bus_for_each_drv+0xe1/0x1e0 [ 250.497900][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 250.499873][ C0] ? __device_attach+0x1e4/0x4d0 [ 250.501765][ C0] ? device_initial_probe+0xaf/0xd0 [ 250.503728][ C0] ? bus_probe_device+0x64/0x160 [ 250.505584][ C0] ? device_add+0x121d/0x1970 [ 250.507531][ C0] ? usb_new_device.cold+0x685/0x115c [ 250.509516][ C0] ? hub_event+0x30a3/0x4a60 [ 250.511256][ C0] ? process_one_work+0xa23/0x1940 [ 250.513121][ C0] usb_submit_urb+0x827/0x19b0 [ 250.514905][ C0] ? __init_swait_queue_head+0xca/0x150 [ 250.517033][ C0] usb_start_wait_urb+0x10e/0x580 [ 250.518978][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 250.521196][ C0] ? trace_kmalloc+0xeb/0x110 [ 250.523220][ C0] ? __asan_memset+0x23/0x50 [ 250.525076][ C0] usb_control_msg+0x328/0x4b0 [ 250.527008][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 250.528994][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.530935][ C0] usb_control_msg_send+0xca/0x130 [ 250.532858][ C0] usb_set_interface+0x9b6/0xe20 [ 250.534754][ C0] snd_usb_midi_v2_create+0x629/0x4070 [ 250.536847][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 250.538855][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.541073][ C0] ? snd_info_create_entry+0x6f/0x400 [ 250.542926][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 250.544775][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 250.546793][ C0] ? snd_info_create_entry+0x314/0x400 [ 250.548833][ C0] ? usb_ifnum_to_if+0x16f/0x1d0 [ 250.550970][ C0] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 250.553606][ C0] usb_audio_probe+0xf05/0x3b10 [ 250.555563][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 250.557592][ C0] ? do_raw_spin_lock+0x128/0x260 [ 250.559531][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.561666][ C0] ? mark_held_locks+0x40/0x70 [ 250.563579][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 250.565801][ C0] ? mark_held_locks+0x40/0x70 [ 250.567690][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 250.569874][ C0] usb_probe_interface+0x303/0x8f0 [ 250.571646][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 250.573519][ C0] really_probe+0x241/0xa60 [ 250.575073][ C0] __driver_probe_device+0x20e/0x450 [ 250.576866][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.578913][ C0] driver_probe_device+0x4a/0x140 [ 250.581118][ C0] __device_attach_driver+0x1df/0x320 [ 250.583530][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 250.585930][ C0] bus_for_each_drv+0x159/0x1e0 [ 250.587939][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 250.589950][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 250.591949][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.594181][ C0] __device_attach+0x1e4/0x4d0 [ 250.596111][ C0] ? __pfx___device_attach+0x10/0x10 [ 250.598108][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 250.600106][ C0] device_initial_probe+0xaf/0xd0 [ 250.601993][ C0] bus_probe_device+0x64/0x160 [ 250.603669][ C0] device_add+0x121d/0x1970 [ 250.605179][ C0] ? __pfx_device_add+0x10/0x10 [ 250.606803][ C0] ? mark_held_locks+0x40/0x70 [ 250.608393][ C0] usb_set_configuration+0xd97/0x1c60 [ 250.610182][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 250.614958][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 250.617093][ C0] usb_probe_device+0xef/0x400 [ 250.618950][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 250.621004][ C0] really_probe+0x241/0xa60 [ 250.622741][ C0] __driver_probe_device+0x20e/0x450 [ 250.624730][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.627027][ C0] driver_probe_device+0x4a/0x140 [ 250.628907][ C0] __device_attach_driver+0x1df/0x320 [ 250.631245][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 250.633997][ C0] bus_for_each_drv+0x159/0x1e0 [ 250.635975][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 250.638146][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 250.640156][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 250.642376][ C0] __device_attach+0x1e4/0x4d0 [ 250.644208][ C0] ? __pfx___device_attach+0x10/0x10 [ 250.646364][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 250.648409][ C0] device_initial_probe+0xaf/0xd0 [ 250.650397][ C0] bus_probe_device+0x64/0x160 [ 250.652352][ C0] device_add+0x121d/0x1970 [ 250.654634][ C0] ? __pfx_device_add+0x10/0x10 [ 250.656758][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 250.658956][ C0] usb_new_device.cold+0x685/0x115c [ 250.660945][ C0] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 250.663091][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 250.664994][ C0] ? mark_held_locks+0x40/0x70 [ 250.666915][ C0] hub_event+0x30a3/0x4a60 [ 250.668646][ C0] ? __pfx_hub_event+0x10/0x10 [ 250.670461][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 250.672767][ C0] ? rcu_is_watching+0x12/0xc0 [ 250.674774][ C0] process_one_work+0xa23/0x1940 [ 250.677021][ C0] ? __pfx_process_one_work+0x10/0x10 [ 250.679490][ C0] ? __pfx_hub_event+0x10/0x10 [ 250.681557][ C0] worker_thread+0x5ef/0xe50 [ 250.683615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 250.686111][ C0] ? kthread+0x13a/0x450 [ 250.688317][ C0] ? __pfx_worker_thread+0x10/0x10 [ 250.690648][ C0] kthread+0x370/0x450 [ 250.692388][ C0] ? __pfx_kthread+0x10/0x10 [ 250.694005][ C0] ret_from_fork+0x72b/0xd50 [ 250.695751][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 250.697948][ C0] ? __switch_to+0x800/0x10f0 [ 250.699965][ C0] ? __pfx_kthread+0x10/0x10 [ 250.701740][ C0] ret_from_fork_asm+0x1a/0x30 [ 250.703544][ C0] [ 250.704891][ C0] Modules linked in: [ 250.706419][ C0] ---[ end trace 0000000000000000 ]--- [ 250.708454][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 250.710684][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 250.718015][ C0] RSP: 0000:ffffc900000079e8 EFLAGS: 00010002 [ 250.720362][ C0] RAX: dffffc0000000000 RBX: ffff8880571c4000 RCX: ffffffff87e52009 [ 250.724220][ C0] RDX: 00000000000000e6 RSI: ffffffff87e51e46 RDI: ffff8880571c4128 [ 250.728092][ C0] RBP: ffff8880571c4128 R08: 0000000000000004 R09: 0000000000000020 [ 250.731824][ C0] R10: 0000000000000020 R11: 000000000000756b R12: ffff8880571c40f0 [ 250.734873][ C0] R13: ffff8880571c4128 R14: ffff8880571c4740 R15: 0000000000000001 [ 250.737801][ C0] FS: 0000000000000000(0000) GS:ffff888096be5000(0000) knlGS:0000000000000000 [ 250.741556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.744151][ C0] CR2: 00000000f7f8a190 CR3: 000000005a384000 CR4: 0000000000352ef0 [ 250.747379][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 250.751000][ C0] Kernel Offset: disabled [ 250.752797][ C0] Rebooting in 86400 seconds..